CVE-2020-27792

CVE-2020-27792 is a heap-based buffer overflow in Ghostscript affecting the lp8000_print_page() path (gdevlp8k.c). The flaw can be triggered by a crafted PDF, potentially causing memory corruption or a denial of service. The vulnerability is cited across multiple advisories (Ghostscript/GhostPDL)...

CVE-2019-15143

CVE-2019-15143 affects DjVuLibre 3.5.27 and is caused by a denial-of-service vulnerability in the bitmap reader. A crafted image can trigger a GBitmap::read_rle_raw infinite loop, leading to resource exhaustion. Affected components include libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp. Public advis...

CVE-2020-22034

CVE-2020-22034 affects FFmpeg 4.2 with a heap-based buffer overflow in libavfilter/vf_floodfill.c that can lead to memory corruption and other potential consequences. The connected advisories confirm this vulnerability in FFmpeg 4.2 and describe the affected component. Remediation is to apply the...

CVE-2021-28699

CVE-2021-28699 affects Xen-based platforms (Citrix Hypervisor and Xen). The issue is an inadequate bounds check in the grant table status path: translation of the grant-status frame numbers can exceed allocated translation space, allowing writes beyond the intended area. Citrix shows this as a ho...

CVE-2021-29509

CVE-2021-29509 affects the Puma HTTP/1.1 server for Ruby/Rack apps. The issue is that, even after the CVE-2019-16770 fix, new keep-alive connections can still cause denial of service by saturating threadpools across a cluster, starving additional connections. The problem is triggered when more co...

CVE-2021-39191

CVE-2021-39191 affects mod_auth_openidc (Apache 2.x OpenID Connect RP). The 3rd‑party init SSO feature could open redirects by supplying a crafted URL in the target_link_uri parameter. A patch in version 2.4.9.4 adds required validation via the OIDCRedirectURLsAllowed setting on target_link_uri. ...

CVE-2022-1354

CVE-2022-1354 refers to a heap buffer overflow in LibTIFF’s tiffinfo.c (TIFFReadRawDataStriped()) that can be triggered by a crafted TIFF file, causing a crash and potential DoS via the tiffinfo tool. Public advisories across vendors note this affects the libtiff/tiffinfo path and that fixes have...

CVE-2022-24754

The CVE-2022-24754 entry concerns PJSIP (pjproject) embedded in Ring. A stack-buffer overflow affects PJSIP users that accept hashed digest credentials (data_type PJSIP_CRED_DATA_DIGEST) in versions up to 2.12. The issue is resolved in the master branch and will be included in the next release; u...

CVE-2022-2868

CVE-2022-2868 affects libtiff’s tiffcrop utility, due to improper input validation that can lead to an out-of-bounds read and crash when processing a crafted TIFF file. Public advisories and vendor notes reference DoS/crash implications and provide fixes by updating libtiff to versions containing...

CVE-2022-31002

Sofia-SIP (Session Initiation Protocol library) is affected by CVE-2022-31002: before 1.13.8, processing a SDP message with a URL ending in % can trigger a crash. Version 1.13.8 contains the patch for this issue. Public advisories (Debian/Ubuntu Gentoo Mageia and other Nessus/Gentoo entries) refe...

CVE-2022-3621

CVE-2022-3621 : A vulnerability in the Linux kernel component nilfs2 affects the function nilfs_bmap_lookup_at_level in fs/nilfs2/inode.c. The issue enables a NULL pointer dereference, with the document noting that the flaw can be exploited remotely. The vulnerability is caused by manipulation of...

CVE-2022-36359

The vulnerability CVE-2022-36359 affects the Django HTTP FileResponse class, with Django 3.2 before 3.2.15 and 4.0 before 4.0.7 vulnerable to a reflected file download (RFD) attack. The attack can occur when the filename is derived from user-supplied input, as it sets the Content-Disposition head...

CVE-2022-3888

CVE-2022-3888 is a use-after-free in Chrome’s WebCodecs implementation that could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected product: Google Chrome (WebCodecs component). Root cause: use-after-free in WebCodecs leading to memory corruption. Impact: high (re...

CVE-2023-4353

CVE-2023-4353 affects ANGLE in Google Chrome up to version 116.0.5845.96. The vulnerability is a heap buffer overflow in ANGLE that can lead to heap corruption via a crafted HTML page, enabling a remote attacker to potentially exploit the browser. Affected software is Google Chrome/Chromium with ...

CVE-2023-52690

CVE-2023-52690 is a Linux kernel vulnerability affecting powerpc/powernv where kasprintf() can return NULL on allocation failure and a null pointer check was missing in scom_debug_init_one(). The fix adds a null pointer check and ensures proper release of ent to avoid memory leaks. Connected advi...

CVE-2024-0746

CVE-2024-0746 describes a crash triggered when a Linux user opens the print preview dialog in Mozilla components. Affected products include Firefox (versions before 122) and Firefox ESR (before 115.7) as well as Thunderbird (before 115.7). The issue is reported as a crash scenario in the print-pr...

CVE-2024-38588

Summary of CVE-2024-38588 (Linux kernel) : A use-after-free in ftrace_location was reported by KASAN and fixed. The race occurs when ftrace_location accesses ftrace pages of a module that is being freed during module unloading (ftrace_release_mod). The root cause is a window where ftrace_location...

CVE-2024-5197

Summary: Multiple connected advisories confirm CVE-2024-5197 affects libvpx with integer overflows in vpx_img_alloc() and vpx_img_wrap(), leading to overflowed buffer calculations and potentially invalid fields in vpx_image_t for versions prior to 1.14.1. The issue is described across Amazon Linu...

CVE-2012-1970

CVE-2012-1970 affects Mozilla Firefox before 15.0, Thunderbird before 15.0, ESR 10.x before 10.0.7, and SeaMonkey before 2.12. The issue stems from multiple unspecified vulnerabilities in the browser engine that can allow remote attackers to cause memory corruption and application crashes or pote...

CVE-2014-5119

CVE-2014-5119 is an off-by-one error in glibc’s gconv transliteration loading code (__gconv_translit_find, gconv_trans.c) that allows context-dependent attackers to crash or execute arbitrary code via crafted CHARSET environment variable input. Affected: glibc and related packages; impact: denial...

CVE-2015-2738

CVE-2015-2738 affects Mozilla Firefox (before 39.0; ESR 31.x before 31.8 and 38.x before 38.1) and Thunderbird (before 38.1). The issue is a read from uninitialized memory in YCbCrImageDataDeserializer::ToDataSourceSurface, with unspecified impact and attack vectors. No remediation details are pr...

CVE-2016-0616

CVE-2016-0616 is an unspecified vulnerability in MySQL/MariaDB related to the Optimizer that allows remote authenticated users to affect availability. Affected products/versions include Oracle MySQL 5.5.46 and earlier; MariaDB before 5.5.47; MySQL 10.0.x before 10.0.23; and 10.1.x before 10.1.10....

CVE-2016-10196

CVE-2016-10196 : A stack-based buffer overflow in libevent’s evutil_parse_sockaddr_port (evutil.c) before 2.1.6-beta allows a crafted long string in ip_as_string to cause a denial-of-service (segmentation fault). Affected software is libevent prior to 2.1.6-beta; the description notes the fix in ...

CVE-2016-5314

CVE-2016-5314 is the LibTIFF vulnerability describing a buffer overflow in PixarLogDecode (tif_pixarlog.c) for LibTIFF 4.0.6 and earlier. The issue allows remote attackers to crash the application or cause possible other impact via a crafted TIFF image, demonstrated by overwriting the vgetparent ...

CVE-2017-5637

CVE-2017-5637 affects Apache ZooKeeper prior to fixes in 3.4.10 and 3.5.3. The issue: two four-letter commands, wchp and wchc, are CPU-intensive and can cause a denial of service by overwhelming CPU on the server, rendering it unable to serve legitimate clients. Affected products/versions include...

CVE-2017-7487

The CVE-2017-7487 issue is in the Linux kernel net/ipx/af_ipx.c ipxitf_ioctl: reference count mishandling causes a use-after-free via a failed SIOCGIFADDR on an IPX interface, enabling local denial of service. Evidence in connected Nessus advisories confirms the vulnerability and that it affects ...

CVE-2018-11214

CVE-2018-11214 affects libjpeg 9a. The vulnerability is in the get_text_rgb_row function in rdppm.c, allowing remote attackers to cause a denial of service (Segmentation fault) via a crafted file (PPM text data). Multiple connected advisories reference this issue and note impact as a DoS vector d...

CVE-2018-13300

Summary: CVE-2018-13300 affects FFmpeg 3.2 and 4.0.1. The vulnerability arises from an improper argument passed to avpriv_request_sample in handle_eac3 (libavformat/movenc.c), which may cause an out-of-bounds read while converting a crafted AVI file to MPEG4, leading to denial of service and pote...

CVE-2018-5996

The CVE-2018-5996 entry affects 7-Zip (and p7zip) with a flaw in NCompress::NRar3::CDecoder::Code prior to version 18.00 that allows remote attackers to trigger memory corruptions in the PPMd code via a crafted RAR archive, potentially causing a denial of service or arbitrary code execution. Conn...

CVE-2019-3498

CVE-2019-3498 affects Django in the function django.views.defaults.page_not_found() where output can be spoofed on a 404 page due to improper neutralization of elements. Affected versions are Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5. Remediation is to upgrade to t...

CVE-2020-11058

CVE-2020-11058 : In FreeRDP, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds read. This affects FreeRDP versions older than 2.0.0 and can cause a manipulated client/server to trigger an invalid data read, potentially disconnecting the session. The i...

CVE-2020-11739

CVE-2020-11739 affects the Xen hypervisor up to 4.13.x. The issue arises from missing memory barriers in the read-write unlock paths, enabling memory reordering on ARM that can break critical-section safety. A malicious guest could cause a race in hypercall paths (e.g., grant-table operations), p...

CVE-2020-16296

Ghostscript (Artifex) vulnerable in GetNumWrongData() within contrib/lips4/gdevlips.c across versions 9.18–9.50; exploitable by processing a crafted PDF file, resulting in denial of service. The issue is confirmed fixed in v9.51. Affected releases and fixes are corroborated across multiple source...

CVE-2020-16308

CVE-2020-16308 affects Artifex Software Ghostscript v9.50, with a vulnerability in p_print_image() in devices/gdevcdj.c that could allow a remote attacker to cause a denial-of-service via a crafted PDF file. The issue is mitigated by upgrading to Ghostscript v9.51, which contains the fix. Referen...

CVE-2020-22054

CVE-2020-22054 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in av_dict_set in dict.c. The issue is consistently reported across multiple advisories (Debian, Debian LTS, openSUSE/openSUSE-SU, SUSE, Ubuntu) tied to FFmpeg 4.2. Exploitation details are not provided in t...

CVE-2021-34334

CVE-2021-34334 affects Exiv2 (image metadata tool/library). A crafted image file can trigger an infinite loop when reading metadata, potentially causing a denial of service if a user runs Exiv2 on the crafted file. Public reports across multiple vendors/sources confirm the issue and indicate the ...

CVE-2021-37996

CVE-2021-37996: Insufficient validation of untrusted input in the Downloads component of the Chromium-based Google Chrome engine before version 95.0.4638.54. This vulnerability allows a remote attacker to bypass navigation restrictions via a malicious file. The connected advisories (e.g., ASA-202...

CVE-2021-4207

CVE-2021-4207 affects QEMU’s QXL display device emulation . A flaw in double-fetch of guest-controlled values cursor->header.width/height can lead to the allocation of a small cursor object followed by a heap-based buffer overflow , enabling a privileged guest to crash the host QEMU process or...

CVE-2021-42530

CVE-2021-42530 affects Exempi (XMP Toolkit SDK) up to version 2021.07 and earlier, due to a stack-based buffer overflow that can lead to arbitrary code execution in the current user context. Exploitation requires the user to open a crafted file. Debian LTS advisories show patched packages: 2.5.2-...

CVE-2023-1816

CVE-2023-1816 affects Google Chrome/Chromium’s Picture-in-Picture feature, with root cause described as an incorrect security UI. It allows a remote attacker to potentially perform navigation spoofing through a crafted HTML page. Affected versions are Chrome/Chromium prior to 112.0.5615.49; remed...

CVE-2023-37202

CVE-2023-37202 affects Firefox (including ESR) and Thunderbird. The issue is caused by cross-compartment wrappers wrapping a scripted proxy, which could store objects from other compartments in the main compartment, resulting in a use-after-free. Affected versions are Firefox <115, Firefox ESR...

CVE-2023-41361

CVE-2023-41361 affects FRRouting FRR 9.0; the bgpd/bgp_open.c path does not check for an overly large rcv software version length, enabling a potential issue. The NVD/NIST entry confirms a critical impact (C:H/I:H/A:H). Debian/DEB LTS advisories indicate a fixed package is available in Debian; en...

CVE-2023-6347

CVE-2023-6347 is a use-after-free in Mojo within Google Chrome/Chromium, prior to version 119.0.6045.199, exposing potential heap corruption via a crafted HTML page. Connected sources confirm the affected component is Mojo in Chromium-based Chrome, with an impact described as high (network attack...

CVE-2024-0751

CVE-2024-0751 : A malicious devtools extension could have been used to escalate privileges. Affected: Firefox < 122, Firefox ESR < 115.7, Thunderbird

CVE-2024-35897

CVE-2024-35897 affects the Linux kernel nf_tables component. The issue arises when updating the discard table flag while a basechain deletion is pending, because unregistration of hooks is deferred to the commit phase. If both commands execute together, a basechain can be deleted while its hook r...

CVE-2025-37758

CVE-2025-37758 affects the Linux kernel’s ata_pxa driver. The root cause was a potential NULL pointer dereference in pxa_ata_probe() when devm_ioremap() returns NULL. The fix adds a NULL check after devm_ioremap() to prevent dereferencing NULL.

CVE-2010-4494

CVE-2010-4494 is a double-free vulnerability in libxml2 (notably 2.7.8 and related versions) used by Chrome and other products. The issue affects libxml2’s handling of XPath/XML entities and could allow a remote attacker to crash or potentially execute code via crafted XML input. Public advisorie...

CVE-2014-8182

CVE-2014-8182 concerns OpenLDAP 2.4 slapd when processing DNS SRV messages. An off-by-one error can cause a crash if the dnssrv backend is used, allowing a remote attacker to crash the service with crafted DNS responses. The available connected sources confirm the affected software (OpenLDAP 2.4/...

CVE-2015-2582

CVE-2015-2582 affects Oracle MySQL Server (GIS subcomponent) with impact to availability. Affected versions: MySQL Server 5.5.43 and earlier and 5.6.24 and earlier. Described as an unspecified vulnerability that could allow a remote attacker to cause a denial of service; several sources corrobora...

CVE-2015-2620

MiracleLinux 4 (AXSA:2015-464:01) lists CVE-2015-2620 among fixes for mysql55-mysql-5.5.45-1.0.1.AXS4. The advisory notes that updated packages upgrade MySQL to version 5. The description indicates an unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier affec...