CVE-2023-0330

CVE-2023-0330 affects qemu via the lsi53c895a DMA-MMIO reentrancy, potentially causing memory corruption such as stack overflow or use-after-free. Public advisories (including Debian LTS and Amazon ALAS) indicate a fix with updated qemu packages; apply the vendor-provided update to mitigate. If d...

CVE-2023-2464

CVE-2023-2464 affects Google Chrome (Chromium-based) via an inappropriate implementation in PictureInPicture. A crafted HTML page and a malicious extension can lead to an origin spoof in the Chrome security UI. The vulnerability is tied to Chrome/Chromium builds prior to 113.0.5672.63 (the fixed ...

CVE-2023-6206

CVE-2023-6206 is described across connected sources as a clickjacking-related issue tied to the fullscreen transition in Mozilla Firefox and Thunderbird. The vulnerability affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The issue is dis...

CVE-2023-6212

CVE-2023-6212 parks memory safety bugs in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4, with evidence of memory corruption and potential to exploit for arbitrary code. The issue affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird

CVE-2024-36005

CVE-2024-36005 is reported in the Astra Linux security bulletin as a Linux kernel vulnerability affecting nf_tables: the kernel could unregister an already unregistered nethook due to mishandling the table dormant flag on netdev release events. The issue is described with the same reproduction tr...

CVE-2024-36017

The CVE-2024-36017 entry is valid and has concrete details in connected sources. The vulnerability is in the Linux kernel rtnetlink path: nested IFLA_VF_VLAN_LIST attributes are assumed to be struct ifla_vf_vlan_info (size 14 bytes). Validation used NLA_HDRLEN (4 bytes), enabling a too-small attr...

CVE-2026-23490

CVE-2026-23490 affects the Python ASN.1 library pyasn1. Prior to 0.6.2, a Denial-of-Service condition can cause memory exhaustion via malformed RELATIVE-OID with excessive continuation octets. The issue is fixed in 0.6.2. Affected versions are those before the upgrade; CVSS v3.1 base score is 7.5...

CVE-2016-1762

CVE-2016-1762 (and related libxml2 flaws) affects the GNOME libxml2 library where crafted XML input can cause denial of service or code execution. The primary cited issue is a heap-based buffer over-read in xmlNextChar prior to libxml2 2.9.4. Public advisories list multiple CVEs (e.g., 2016-1833/...

CVE-2017-5442

CVE-2017-5442 is a use-after-free in Firefox/Thunderbird during DOM style changes, causing potentially exploitable crashes. Affected products/versions in the provided documents include Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox

CVE-2017-6014

Wireshark (version 2.2.4 and earlier) is affected by CVE-2017-6014 in the STANAG 4607 dissector. A crafted capture with a null packet size field can cause the offset to not advance, leading to an infinite loop and rapid memory exhaustion. Debian security advisory DSA-3811-1 notes fixes in Wiresha...

CVE-2017-9064

CVE-2017-9064 affects WordPress prior to 4.7.5. The vulnerability is a CSRF in the filesystem credentials dialog where updating credentials does not require a nonce, enabling unauthorized credential changes. The issue is validated by the description in the initial document; no exploitation status...

CVE-2018-1000222

CVE-2018-1000222 affects libgd (GD Graphics Library). A double-free in gdImageBmpPtr can enable remote code execution when processing a specially crafted JPEG. The issue is fixed in a later commit (ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5); multiple advisories reference this CVE and note patches ...

CVE-2018-12372

CVE-2018-12372 affects Mozilla Thunderbird. Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext in HTML reply/forward messages. Public documentation lists affected product: Thunderbird prior to 52.9. Root cause described across connected sources as leakage of S...

CVE-2018-19107

Exiv2 0.26 contains a vulnerability in Exiv2::IptcParser::decode (iptc.cpp) triggered when processing crafted PSD images via PSD reader (psdimage.cpp), causing a heap-based buffer over-read due to an integer overflow. This CVE-2018-19107 entry is corroborated by multiple advisories listing Exiv2 ...

CVE-2018-20750

CVE-2018-20750 : LibVNC up to 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The description notes that the fix for CVE-2018-15127 was incomplete, indicating an insufficiently addressed heap-write issue in the server component. Multiple advisories and lists ...

CVE-2018-5187

CVE-2018-5187 corresponds to memory safety bugs reported in Firefox 60/Firefox ESR 60 and affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox

CVE-2019-12213

FreeImage library (3.18.0 affected in FreeImage 3.18.0 and earlier) contains TIFF handling flaws in PluginTIFF.cpp that lead to: (1) CVE-2019-12211 — heap overflow during memcpy in Load, enabling possible DoS or other impact; and (2) CVE-2019-12213 — stack exhaustion due to recursion in TIFF proc...

CVE-2019-13626

SDL2 2.x up to 2.0.9 contains a heap-based buffer over-read in Fill_IMA_ADPCM_block caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c (CVE-2019-13626). Multiple connected advisories (openSUSE/SUSE, Debian LTS, Nessus plugins, and related vendor pages) indicate this issue was...

CVE-2019-14563

CVE-2019-14563 is an EDK II vulnerability described as numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib that can allow an authenticated, local attacker to escalate privileges. The connected advisories (e.g., MiracleLinux AXSA:2020-915, Alibaba Cloud Linux ALINUX3-SA-2022:0098, Oracle Linux...

CVE-2019-25059

CVE-2019-25059 affects Artifex Ghostscript (through 9.26) with a mishandling of .completefont, noted as stemming from an incomplete fix for CVE-2019-3839. Connected advisories/tracker data indicate a remediation via Ghostscript package updates (e.g., Debian’s 9.26+ and vendor advisories urging up...

CVE-2019-9215

CVE-2019-9215 affects LIVE555: malformed headers can cause invalid memory access in parseAuthorizationHeader. CVE-2019-7314 (also in LIVE555) enables Use-After-Free during RTSP termination. Documents indicate affected versions before 2019.06.28 and show remediation via updating to 2019.06.28 or l...

CVE-2020-13696

The CVE-2020-13696 issue affects LinuxTV xawtv before 3.107. The dev_open() function in v4l-conf.c fails to sufficiently validate the target path, enabling a local attacker with access to the setuid-root v4l-conf binary to probe for file existence and trigger opens on arbitrary files (e.g., via a...

CVE-2020-22022

FFmpeg 4.2 contains a heap-based Buffer Overflow in filter_frame (libavfilter/vf_fieldorder.c) that can cause memory corruption. The CVE is CVE-2020-22022. Affected products in connected advisories include FFmpeg packages in Ubuntu and Debian ecosystems; remediation guidance points to upgrading F...

CVE-2020-22026

CVE-2020-22026 describes a Buffer Overflow in FFmpeg 4.2, located in config_input() in libavfilter/af_tremolo.c, which could allow a remote attacker to cause a Denial of Service. The connected documents consistently tie this issue to FFmpeg 4.2 and confirm the DoS impact; exploitation details are...

CVE-2020-28368

CVE-2020-28368 concerns Xen up to 4.14.x where a power/energy monitor side-channel (Platypus) could leak sensitive data (e.g., AES keys) from outside the guest. The root cause is an access-control weakness on the power/energy monitoring interfaces exposed to guests. The documented impact is infor...

CVE-2021-20273

Privoxy (affected before 3.0.32) contains a crash condition triggered by a crafted CGI request when Privoxy is toggled off. Multiple connected advisories confirm the fix is to upgrade to version 3.0.32; Debian, Gentoo, openSUSE, Ubuntu, and others list CVE-2021-20273 among privileges impacting de...

CVE-2021-3596

CVE-2021-3596 affects ImageMagick prior to 7.0.10-31, where a NULL pointer dereference in ReadSVGImage() (coders/svg.c) occurs due to not validating the return value from libxml2’s xmlCreatePushParserCtxt() and using it directly. This leads to a crash/segmentation fault. The issue is documented a...

CVE-2021-4185

CVE-2021-4185 affects Wireshark’s RTMPT dissector and enables denial of service via crafted captures or packet injection by triggering an infinite loop. Public details confirm vulnerable versions include Wireshark 3.6.0 and 3.4.0–3.4.10. Advisories note remediation through updates; for example, D...

CVE-2022-2318

CVE-2022-2318 is a use-after-free vulnerability in the Linux kernel's Rose (net/rose/rose_timer.c) timer handler that can cause denial of service (crash) with local privileges. Connected advisories confirm the vulnerability affects Linux kernel releases and note fixed versions: Debian security ad...

CVE-2022-2519

CVE-2022-2519 affects libtiff 4.4.0rc1, with the vulnerability in rotateImage() in tiffcrop.c:8839 causing double free or corruption and potentially crashing the process. Connected advisories confirm this is one of several libtiff issues (including CVE-2022-2520/2521) addressed by vendor updates....

CVE-2023-6865

CVE-2023-6865 describes a vulnerability in Firefox’s EncryptingOutputStream that could expose uninitialized data, potentially allowing data to be written to local disk with implications for private browsing mode. Affected products noted in the provided documents include Firefox ESR versions prior...

CVE-2025-37819

CVE-2025-37819 affects the Linux kernel and relates to a use-after-free in irqchip/gic-v2m: gicv2m_get_fwnode() registered as pci_msi_get_fwnode_cb(). With ACPI, this callback can be invoked during PCI host bridge probing but is marked __init and freed prematurely, risking a crash (as per the vul...

CVE-2005-2351

Vulnerable software: Mutt before 1.5.20 patch 7. The issue allows a denial-of-service by sending a series of requests to mutt temporary files. Root cause: access to or manipulation of temporary files used by Mutt. Remediation: upgrade to 1.5.20 patch 7 or newer where the fix is applied. Exploit s...

CVE-2009-4484

The CVE-2009-4484 issue affects yaSSL’s CertDecoder::GetName in taocrypt/src/asn.cpp (yaSSL before 1.9.9), which MySQL bundles and uses for SSL handshakes. A crafted X.509 client certificate name can trigger multiple stack-based buffer overflows, enabling remote code execution or memory corruptio...

CVE-2014-1508

CVE-2014-1508 affects Mozilla Firefox family components (libxul) where libxul.so!gfxContext::Polygon can leak memory, cause out-of-bounds reads, or crash, with potential Same Origin Policy bypass via MathML polygon rendering. Affected: Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbir...

CVE-2015-0294

The CVE-2015-0294 entry concerns GnuTLS before 3.3.13, where the library does not validate that the signature algorithms match when importing a certificate. The vulnerability is documented in multiple connected sources (e.g., MiracleLinux AXSA advisory referencing CVE-2015-0294 and vendor advisor...

CVE-2015-2559

CVE-2015-2559 affects Drupal 6.x before 6.35 and 7.x before 7.35, enabling a remote authenticated user to reset another user’s password by exploiting a crafted password‑reset URL and matching password hashes. Connected advisories confirm this as part of broader Drupal fixes and, in some records (...

CVE-2016-5828

CVE-2016-5828 affects the Linux kernel on powerpc platforms (up to 4.6.3). The start_thread function mishandles transactional memory, allowing local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) by starting and suspending a transaction befo...

CVE-2017-5410

CVE-2017-5410 is a memory corruption bug during JavaScript garbage collection (incremental sweeping) that affects Firefox and Thunderbird prior to version 52. Upgrading to Firefox/Thunderbird 52.0 or later (as reflected in multiple advisories) is the remediation. Exploitation details are not prov...

CVE-2017-6056

Technical details for CVE-2017-6056 (affected product, root cause, impact and fixes) are not provided in the connected documents; monitor for updates.

CVE-2017-7818

Summary: CVE-2017-7818 is a use-after-free vulnerability in Thunderbird (and Firefox/ESR components) involving manipulation of ARIA element arrays via the DOM, leading to a potentially exploitable crash. The connected sources confirm the issue affects Thunderbird prior to 52.4.0 and related Mozil...

CVE-2017-7823

The CVE-2017-7823 entry describes a CSP sandbox issue where the sandbox did not create a unique origin, causing documents to behave as if allow-same-origin were always specified and enabling potential XSS. Affected products are Mozilla Thunderbird < 52.4, Firefox < 56, and Firefox ESR

CVE-2018-10860

CVE-2018-10860 affects perl-Archive-Zip (Archive::Zip). A directory traversal flaw arises from improper path sanitization when extracting zip archives, enabling a remote attacker to write/overwrite arbitrary files in the Perl interpreter’s context. Publicly available advisories confirm fixes in v...

CVE-2018-18585

CVE-2018-18585 affects libmspack prior to 0.8alpha, where chmd_read_headers in mspack/chmd.c accepts a filename with a NULL byte as the first or second character (e.g., "/\0"). Multiple downstream advisories reference this CVE and link to libmspack updates; Amazon Linux 2 ALAS2-2019-1310 explicit...

CVE-2018-5096

CVE-2018-5096 is a use-after-free vulnerability in editing events within form elements that can cause a crash. Documented impact is limited to Firefox ESR versions older than 52.6 and Thunderbird versions older than 52.6, with a fix included in version 52.6.0 for affected Mozilla products (Firefo...

CVE-2019-11007

GraphicsMagick 1.4 snapshot-20190322 Q8 is affected by a heap-based buffer over-read in the ReadMNGImage function (coders/png.c), enabling denial of service or information disclosure via image colormaps. Public disclosures and multiple advisories link CVE-2019-11007 to this issue. Impact details ...

CVE-2019-14534

In VLC media player, CVE-2019-14534 is a NULL pointer dereference in the ASF demuxer (SeekPercent in demux/asf/asf.c) that can lead to a denial of service. Affected product: VLC up to version 3.0.7.1. Root cause: NULL pointer dereference in ASF demuxer code when seeking percent. Impact: DoS with ...

CVE-2019-14535

Summary: CVE-2019-14535 is a divide-by-zero error in the SeekIndex function (demux/asf/asf.c) of VLC media player 3.0.7.1 that can trigger a fault from crafted WMV files. The issue is in the ASF demuxer and was addressed in VLC upgrades to 3.0.8 across multiple advisories. Affected product: VLC m...

CVE-2019-15143

CVE-2019-15143 affects DjVuLibre 3.5.27 and is caused by a denial-of-service vulnerability in the bitmap reader. A crafted image can trigger a GBitmap::read_rle_raw infinite loop, leading to resource exhaustion. Affected components include libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp. Public advis...

CVE-2020-22034

CVE-2020-22034 affects FFmpeg 4.2 with a heap-based buffer overflow in libavfilter/vf_floodfill.c that can lead to memory corruption and other potential consequences. The connected advisories confirm this vulnerability in FFmpeg 4.2 and describe the affected component. Remediation is to apply the...