CVE-2019-10649

CVE-2019-10649 affects ImageMagick 7.0.8-36 Q16, caused by a memory leak in the function SVGKeyValuePairs in coders/svg.c. This flaw can enable a denial of service via a crafted image file. The connected documents consistently describe the vulnerability as a memory leak leading to DoS; no exploit...

CVE-2019-11627

CVE-2019-11627 affects signing-party’s gpg-key2ps tool, where an unsafe shell call enables shell injection via a User ID. Public advisories (openSUSE, Mageia) report this vulnerability and provide updates that fix the issue in signing-party packages. The vulnerability is labeled critical (CVSSv3....

CVE-2019-14493

OpenCV vulnerability CVE-2019-14493 affects OpenCV prior to 4.1.1, due to a NULL pointer dereference in cv::XMLParser::parse (modules/core/src/persistence.cpp). The issue can lead to crashes (denial of service) as indicated by multiple advisories. Public details include references from Debian, Ub...

CVE-2019-16219

CVE-2019-16219 concerns WordPress core prior to version 5.2.3, where a stored XSS flaw in shortcode previews could allow injection of malicious scripts. The vulnerability arises from improper handling of shortcode previews, enabling an attacker to potentially execute script when a user previews a...

CVE-2019-17052

CVE-2019-17052 affects Linux kernel 3.16–5.3.2 where several AF_NET_RAW-bound protocols (AX.25) do not enforce CAP_NET_RAW in socket creation, allowing unprivileged users to create raw sockets. Related entries mention additional interfaces (IEEE802.154, Appletalk, ISDN, NFC) with the same CAP_NET...

CVE-2019-3832

CVE-2019-3832 affects libsndfile (example: 1.0.28-14 in Mariner/Debian). The issue is a read past buffer limits in wav_write_header() due to an incomplete fix for CVE-2018-19758, enabling a local crash. Connected sources consistently reference libsndfile and note that upgrading to a newer libsndf...

CVE-2020-22033

CVE-2020-22033 is a heap-based Buffer Overflow in FFmpeg 4.2, specifically in libavfilter/vf_vmafmotion.c (convolution_y_8bit). Exploitation could lead to a Denial of Service. The connected advisories confirm affected FFmpeg 4.2 and note remediation via vendor security updates; Ubuntu USN-5472-1 ...

CVE-2020-29481

CVE-2020-29481 affects Xen up to 4.14.x. The issue: Xenstore node access rights are per domid and are not removed when a domain is destroyed, so a newly created domain with the same domid can inherit the previous domain’s Xenstore permissions. This potentially allows a newly created guest to read...

CVE-2021-39924

Wireshark vulnerability CVE-2021-39924: a large loop in the Bluetooth DHT dissector can cause denial of service via crafted packets/captures. Affected Wireshark versions: 3.4.0–3.4.9 and 3.2.0–3.2.17. Root cause is a looping construct in the DHT parser. Remediation exists in distro advisories; De...

CVE-2021-4059

CVE-2021-4059 is a Chromium/Google Chrome loader vulnerability with insufficient data validation in the loader prior to version 96.0.4664.93, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected software entry points include the Chromium browser engine used in Ch...

CVE-2022-0583

Wireshark CVE-2022-0583 is a crash in the PVFS protocol dissector that can cause a denial of service via crafted captures or packet injection in Wireshark versions 3.6.0–3.6.1 and 3.4.0–3.4.11. The issue has been addressed in multiple vendor advisories with fixes in newer packages (e.g., Debian 3...

CVE-2022-23033

CVE-2022-23033 affects the Xen hypervisor (Arm guest) where guest_physmap_remove_page and related p2m removal do not clear a pagetable entry if the valid bit is not set, allowing a guest that uses set/way cache maintenance instructions and then releases memory via XENMEM_decrease_reservation to r...

CVE-2022-23607

The CVE concerns treq, an HTTP library for Twisted, where cookies passed to requests (e.g., treq.get/post, HTTPClient) were not bound to a single domain, enabling supercookies that could leak data on redirects. Affected behavior is that cookies are sent to every domain; impact is sensitive inform...

CVE-2022-30789

NTFS-3G contains a heap-based buffer overflow in ntfs_check_log_client_array (through 2021.8.22). Affected: NTFS-3G implementations shipping NTFS support; root cause is a boundary/overflow issue when handling NTFS image data. Impact is reported as high (confidentiality, integrity, and availabilit...

CVE-2023-6348

CVE-2023-6348 describes a Type Confusion in Chrome/Chromium’s Spellcheck that could allow heap corruption when a renderer is compromised via a crafted HTML page. Connected sources confirm affected components as Chromium-based browsers (Chrome/Chromium) and outline remediation by upgrading to Chro...

CVE-2023-6510

CVE-2023-6510 is a Chrome/Chromium use-after-free in Media Capture (prior to 120.0.6099.62) that could allow a remote attacker to potentially exploit heap corruption via specific UI interaction. Affected product: Chromium/Chrome browser components handling Media Capture. Root cause: use-after-fre...

CVE-2024-24814

CVE-2024-24814 affects the mod_auth_openidc OpenID Connect Relying Party module for Apache 2.x. The issue arises from missing input validation on the mod_auth_openidc_session_chunks cookie, which can be manipulated to a very large value, causing the server to work hard, delay responses, and poten...

CVE-2024-26764

CVE-2024-26764 : Linux kernel vulnerability in fs/aio where kiocb_set_cancel_fn() was not restricted to I/O submitted via libaio. If called for io_uring I/O, a kernel warning is produced (kiocb_set_cancel_fn+0x9c/0xa8). The fix: set the IOCB_AIO_RW flag for read/write I/O submitted by libaio to p...

CVE-2024-30205

CVE-2024-30205 affects Emacs prior to 29.3 where Org mode trusts contents of remote files (Org mode before 9.6.23). CVSS indicates HIGH severity with LOCAL exploitability and USER INTERACTION required. Affected distributions document remediation via updating Emacs/Org-mode to fixed versions (e.g....

CVE-2025-37849

CVE-2025-37849 affects the Linux kernel KVM arm64; the issue occurs when kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, leaving vGIC vCPU data initialised. This can leak memory on vCPU destruction and may cause use-after-free in redistributor handling. The fix adds prope...

CVE-2025-37867

CVE-2025-37867 : Affects the Linux kernel RDMA/core subsystem. The issue stems from an oversized kvmalloc() warning during syzkaller-triggered activity; the fix silences the warning by adding __GFP_NOWARN to the kvmalloc path (function: __kvmalloc_node_noprof). Reported in connected advisories (A...

CVE-2025-38637

The CVE CVE-2025-38637 affects the Linux kernel skbprio queue in net_sched when used as a child qdisc under Token Bucket Filter (TBF). The root cause is an overly strict assertion in skbprio enqueue/dequeue that can miscount lengths because TBF may peek at packets without dequeueing when tokens a...

CVE-2010-3876

CVE-2010-3876 affects the Linux kernel: the code path net/packet/af_packet.c in kernel versions before 2.6.37-rc2 does not properly initialize certain structure members, allowing local users with CAP_NET_RAW to read copies of the applicable structures from kernel stack memory. Publicly document d...

CVE-2011-1499

Affected software: Tinyproxy (before 1.8.3). Root cause: ACL configuration with CIDR in acl.c permits TCP connections from any IP, effectively making the proxy open. Impact: potential anonymization of traffic as the proxy can be used to hide origin. Remediation: upgrade to Tinyproxy 1.8.3 or appl...

CVE-2013-0783

CVE-2013-0783 refers to multiple unspecified vulnerabilities in the Mozilla Firefox browser engine (Firefox <19.0, ESR 17.x <17.0.3, Thunderbird <17.0.3, SeaMonkey

CVE-2014-2851

CVE-2014-2851: Integer overflow in ping_init_sock (net/ipv4/ping.c) of the Linux kernel up to 3.14.1 allows local users to cause a denial of service (use‑after‑free and system crash) and potentially gain privileges via a crafted application that exploits an improperly managed reference counter. C...

CVE-2015-8806

CVE-2015-8806 — libxml2 heap-buffer overread in dict.c . A remote attacker can crash an affected application by sending a crafted HTML document containing an unexpected character immediately after the "

CVE-2016-1000346

CVE-2016-1000346 is a vulnerability in the Bouncy Castle JCE Provider where, in version 1.55 and earlier, the other party's DH public key was not fully validated during Diffie-Hellman key exchange, enabling potential leakage of private key details. Release 1.56 added parameter checks on the agree...

CVE-2016-5291

CVE-2016-5291 is a local-bypass vulnerability where a attacker could load arbitrary local content by abusing local shortcut files, bypassing same-origin policy in Mozilla Firefox and Thunderbird products. Public details in connected docs indicate affected versions include Thunderbird < 45.5, F...

CVE-2017-0358

NTFS-3G, the read-write NTFS driver for FUSE, is affected by CVE-2017-0358: it does not scrub the environment before invoking modprobe, enabling a local user to escalate to root. The issue is documented in various advisories and mitigated by SUSE/openSUSE updates SUSE-SU-2018:3587-1/3587-2, which...

CVE-2017-1000472

POCO C++ Libraries prior to 1.8 contain a ZIP path-validation flaw in ZipCommon::isValidPath() that can allow absolute path traversal during ZIP decompression, potentially enabling creation or overwriting of arbitrary files via a crafted ZIP file. Reports across multiple distributions (Debian, Fe...

CVE-2018-10100

CVE-2018-10100 affects WordPress, with the login redirect URL not validated/sanitized when HTTPS is forced (pre-4.9.5). Related issues include CVE-2018-10102, where the generator tag’s version string could enable XSS via unsanitized output. Debian and Debian-LTS advisories (DSA-4193-1, DLA-1366-1...

CVE-2018-17476

CVE-2018-17476 concerns Google Chrome/Chromium before 70.0.3538.67, where an incorrect Cast UI dialog placement could allow a remote attacker to obscure the full-screen warning via a crafted HTML page. The issue is categorized as content spoofing/UI-related, with potential to mislead users about ...

CVE-2018-17958

CVE-2018-17958 affects QEMU, specifically the rtl8139 network device implementation (rtl8139_do_receive in hw/net/rtl8139.c). The root cause is an incorrect integer data type, which leads to a buffer overflow. The description and connected advisories confirm the vulnerability but do not provide a...

CVE-2018-19058

The connected documents corroborate CVE-2018-19058 as a Poppler 0.71.0 issue: a reachable abort in Object.h caused by EmbFile::save2 lacking a stream check leads to denial of service. Additional CVEs in the same Poppler set are cited across multiple advisories (CVE-2018-19059, CVE-2018-19060, CVE...

CVE-2018-19115

CVE-2018-19115 affects keepalived with a heap-based buffer overflow in extract_status_code (lib/html.c) when parsing HTTP status codes, leading to potential DoS and, per advisories, possibly other impact. Affected versions include keepalived before 2.0.7 (earlier sources) with fixes propagated in...

CVE-2020-12066

CVE-2020-12066 affects Teeworlds 0.7.x before 0.7.5. The vulnerability resides in CServer::SendMsg in engine/server/server.cpp and allows a remote attacker to shut down the server (denial of service) without requiring authentication. Impact is server availability (A=High) with network attack vect...

CVE-2020-22042

CVE-2020-22042 is a Denial-of-Service vulnerability in FFmpeg 4.2 caused by a memory leak in the function link_filter_inouts (libavfilter/graphparser.c). Connected sources confirm the code path and impact but do not introduce additional exploitation details beyond the memory leak, so exploitation...

CVE-2021-21216

CVE-2021-21216 affects Google Chrome Autofill: an inappropriate implementation allowed remote attackers to spoof the security UI via a crafted HTML page. The issue is categorized as content spoofing and arises from Autofill handling in Chrome prior to 90.0.4430.72. Connected advisories (Arch Linu...

CVE-2021-3657

CVE-2021-3657 affects mbsync (isync) versions before 1.4.4. The vulnerability stems from inadequate handling of extremely large IMAP literals (≥2 GiB), allowing a malicious or compromised IMAP server, and potentially external senders, to trigger buffer overflows that could be exploited for remote...

CVE-2022-1623

CVE-2022-1623 affects LibTIFF. The master branch contains an out-of-bounds read in LZWDecode() in libtiff/tif_lzw.c:624, enabling denial-of-service via a crafted TIFF file. For users building from source, a fix is available via commit b4e79bfa0c7d2d08f6f1e7ec38143fc8cb11394a . Connected advisorie...

CVE-2022-21722

CVE-2022-21722 affects PJPROJECT (PJMEDIA) used by PJSCI/PJSIP. In 2.11.1 and earlier, certain incoming RTP/RTCP packets can cause out-of-bounds read access due to multiple code paths; this impacts users accepting RTP/RTCP streams. A patch is available as a commit in the master branch. There are ...

CVE-2022-23480

CVE-2022-23480 affects the xrdp project, with a buffer overflow in the devredir_proc_client_devlist_announce_req() function present in older releases (before 0.9.21). Multiple connected sources confirm the issue in xrdp and indicate the vulnerability can impact remote-desktop exposure; Debian sec...

CVE-2022-3626

CVE-2022-3626 affects LibTIFF 4.4.0 with an out-of-bounds write in _TIFFmemset (libtiff/tif_unix.c:340), triggered when processing Crop selections via processCropSelections in tools/tiffcrop.c:7619. This leads to a denial-of-service when processing a crafted TIFF file. The vulnerability is addres...

CVE-2023-52609

CVE-2023-52609 : Linux kernel binder race between mmput() and do_exit() causes delayed cleanup when Task A pins a remote mm and Task B exits. The race can defer death notifications until a binder event wakes Task A. The patch uses mmput_async() to schedule cleanup work in the mm->async_put_wor...

CVE-2024-35895

The CVE-2024-35895 vulnerability affects the Linux kernel, specifically the BPF sockmap/sockhash path. A deadlock could occur when map_delete_elem is invoked from a context where interrupts are disabled; the fix adds a hardirq-safety check to bail out if map_delete_elem runs in a non-hardirq-unsa...

CVE-2024-41000

CVE-2024-41000 : Linux kernel: block/ioctl: prefer different overflow check. UBSAN signed-overflow triggered by overflow in signed arithmetic during ioctl handling; fixed by reworking the overflow check to avoid performing an actual overflow in the check itself. The issue is linked to reintroduci...

CVE-2025-23138

CVE-2025-23138: In the Linux kernel, watch_queue: fix pipe accounting mismatch. watch_queue_set_size() updated charged pipe buffers for user->pipe_bufs but did not update pipe->nr_accounted due to pipe_resize_ring() guard, risking underflow when a pipe is freed and causing failures in too_m...

CVE-2025-23157

CVE-2025-23157 affects the Linux kernel’s media/venus/hfi_parser. Root cause: init_codecs can be invoked multiple times by manipulated video firmware payload, causing codecs_count to exceed MAX_CODEC_NUM and trigger an out-of-bounds access. The fix resets the counter to start from the beginning t...

CVE-2025-23161

CVE-2025-23161 : In the Linux kernel, the PCI vmd driver fixed a lock context issue by changing vmd_dev::cfg_lock from spinlock_t to raw_spinlock_t so it can be used with interrupts disabled in PREEMPT_RT contexts. This avoids a sleeping-lock scenario when accessing PCI config space via pci_ops r...