CVE-2016-9190

Pillow (Python Imaging Library) prior to version 3.3.2 is affected by CVE-2016-9190. The bug arises from an Insecure Sign Extension issue in ImagingNew within Storage.c, enabling context-dependent attackers to achieve arbitrary code execution via a crafted image file. Affected versions are Pillow...

CVE-2017-17480

OpenJPEG 2.3.0 contains a stack-based buffer overflow in the pgxtovolume function (jp3d/convert.c). The out-of-bounds write can enable remote denial of service or possibly remote code execution. Publicly documented remediation in connected advisories includes updates/patches: Debian DSA-4405-1 fi...

CVE-2018-0361

CVE-2018-0361 affects ClamAV up to version 0.100.1; it stems from a missing PDF object length check, causing an unreasonably long parse time for relatively small PDFs. The issue is fixed in ClamAV 0.100.1 (and via vendor advisories such as openSUSE/SUSE Debian DLA), so upgrading to 0.100.1 or lat...

CVE-2018-1000544

CVE-2018-1000544 affects the rubyzip gem (versions up to and including 1.2.1). It enables a Directory Traversal in Zip::File that can write arbitrary files to the filesystem when processing crafted ZIPs (e.g., using symlinks or absolute paths). Public advisories (e.g., Debian DLA-2307-1, RH advis...

CVE-2018-16542

CVE-2018-16542 affects Artifex Ghostscript prior to 9.24. An attacker could craft PostScript to trigger insufficient interpreter stack-size checking during error handling, potentially crashing the Ghostscript interpreter (denial of service). Some connected sources also describe a stack-based out-...

CVE-2018-18351

CVE-2018-18351 is a Chromium/Google Chrome vulnerability described in connected sources as an access restriction bypass in the Navigation component, caused by insufficient policy enforcement that allows bypassing the SameSite cookie policy via a crafted HTML page. Affected product: Chromium/Chrom...

CVE-2018-19199

CVE-2018-19199 affects uriparser before 0.9.0. UriQuery.c allows an integer overflow via uriComposeQuery* or uriComposeQueryEx* due to an unchecked multiplication; CVE-2018-19198 covers an out-of-bounds write via the same functions because of mishandling of '&'. Multiple advisories (Ubuntu USN-51...

CVE-2018-6124

CVE-2018-6124 is a type confusion vulnerability in Blink ReadableStreams in Google Chrome (Chromium) prior to 67.0.3396.62. The underlying issue is a type confusion in Blink’s ReadableStreams, allowing a remote attacker to potentially cause object corruption via a crafted HTML page. Affected soft...

CVE-2020-22049

CVE-2020-22049 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in wtvfile_open_sector() (wtvdec.c). Exploitation could lead to a DoS via resource exhaustion. The connected documents (Debian, SUSE/openSUSE, Astra Linux advisories) confirm FFmpeg 4.2 is affected and list ...

CVE-2020-24916

CVE-2020-24916 affects the Yaws web server CGI implementation, with versions 1.81–2.0.7 vulnerable. The root cause is that CGI requests are not properly sanitized, enabling a remote attacker to execute arbitrary shell commands by crafting CGI executable names. This is a remote, unauthenticated co...

CVE-2021-1056

CVE-2021-1056 affects NVIDIA GPU Display Driver for Linux (kernel mode layer nvidia.ko). A local attacker could exploit improper handling of OS filesystem permissions to break GPU device isolation, potentially causing denial of service or information disclosure. Public details in connected docume...

CVE-2021-1095

CVE-2021-1095 affects NVIDIA GPU Display Driver for Windows and Linux. Root cause: kernel‑mode layer nvlddmkm.sys handlers for control calls with embedded parameters may dereference an untrusted pointer, leading to Denial of Service. Impact: local attacker can crash or disrupt the system. Remedia...

CVE-2021-38008

CVE-2021-38008 is a use-after-free vulnerability in Chromium’s media component, affecting Chromium/Chrome prior to 96.0.4664.45. Impact: remote attackers could exploit this to execute arbitrary code or corrupt heap via crafted HTML content. Affected: Chromium browser engine (media component); roo...

CVE-2021-38019

CVE-2021-38019 is a Chromium/Chromium-based browser vulnerability describing insufficient policy enforcement in the CORS component prior to 96.0.4664.45, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Connected advisories (Arch Linux ASA/AVGs, Debian DSA, and AS/AST...

CVE-2021-43113

The CVE-2021-43113 case concerns iTextPDF (iText 7 era) where the CompareTool filename handling interacts with Ghostscript, enabling a command injection via GhostscriptHelper.java. Affected products/versions: iTextPDF before 7.1.17 (up to but not including 4.4.13.3); the Debian/libitext5-java adv...

CVE-2022-23124

Netatalk is affected by CVE-2022-23124 (out-of-bounds read) and related CVEs, enabling unauthenticated information disclosure and potential code execution in some contexts. Public advisories reference multiple Netatalk CVEs (including CVE-2022-23124 and others) with impact descriptions such as in...

CVE-2025-37850

The CVE-2025-37850 issue relates to the Linux kernel PWM Mediatek driver. Under CONFIG_COMPILE_TEST && !CONFIG_HAVE_CLK, pwm_mediatek_config() could divide by zero when obtaining the clock rate for pc->clk_pwms[pwm->hwpwm], because clk_get_rate() may return zero in the !CONFIG_HAVE_CLK path...

CVE-2007-2583

The vulnerability CVE-2007-2583 affects MySQL. The in_decimal::set function in item_cmpfunc.cc for MySQL versions before 5.0.40 and 5.1 before 5.1.18-beta can crash the server (denial of service) via a crafted IF clause that triggers a divide-by-zero error and a NULL pointer dereference. Connecte...

CVE-2009-0949

CVE-2009-0949 affects CUPS before 1.3.10. The ippReadIO function in cups/ipp.c within cupsd fails to properly initialize memory for IPP request packets, enabling a remote attacker to trigger a denial of service (NULL pointer dereference and cupsd crash) via a scheduler request containing two cons...

CVE-2010-3437

The vulnerability CVE-2010-3437 affects the Linux kernel (before 2.6.36-rc6) in pkt_find_dev_from_minor within drivers/block/pktcdvd.c. A crafted index value passed via PKT_CTRL_CMD_STATUS ioctl can cause a signedness error, enabling local attackers to read kernel memory or trigger a crash (DoS)....

CVE-2010-3454

OpenOffice.org/OpenOffice.org2/3.x before 3.3 is affected by multiple off-by-one and out-of-bounds write flaws in WW8DopTypography::ReadFromMem (OOo), triggered by crafted Word .DOC typography data. This can cause denial of service or arbitrary code execution. Remediation: apply the patched/OpenO...

CVE-2012-3166

CVE-2012-3166 refers to an unspecified vulnerability in the MySQL Server component (InnoDB) that affects availability for remote authenticated users. It targets Oracle MySQL 5.1.63 and earlier and 5.5.25 and earlier. Connected advisories (e.g., MiracleLinux AXSA-2012-1036:03, OpenVAS listings) co...

CVE-2014-0402

CVE-2014-0402 is an unspecified vulnerability in the MySQL Server component (Oracle MySQL) affecting versions 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier, allowing remote authenticated users to affect availability via unknown vectors related to Locking. Connected documents corr...

CVE-2014-0461

CVE-2014-0461 is an unspecified vulnerability in the Libraries component with complete confidentiality/integ rity/availability impact. IBM bulletins document affected IBM SDK/JAVA editions and offer fixes: IBM SDK, Java 2 Technology Edition v5.0 SR16 Fix Pack 5 and earlier; IBM SDK, Java Technolo...

CVE-2014-1487

CVE-2014-1487 affects Mozilla Firefox (Web workers) and related Mozilla suite components. The issue allows remote attackers to bypass Same Origin Policy and obtain sensitive authentication data via error-message handling in Web workers, affecting Firefox versions before 27.0 (and ESR 24.x before ...

CVE-2015-3165

CVE-2015-3165 is a PostgreSQL double-free remote-denial-of-service vulnerability. Affected: PostgreSQL versions pre-9.0.20, 9.1.x pre-9.1.16, 9.2.x pre-9.2.11, 9.3.x pre-9.3.7, and 9.4.x pre-9.4.2. Root cause: double-free during SSL session shutdown when the authentication timeout is expiring, al...

CVE-2016-1840

CVE-2016-1840: libxml2 contains a heap-based buffer overflow in xmlFAParsePosCharGroup (pre-2.9.4). Affected on Apple iOS (pre-9.3.2), OS X (pre-10.11.5), tvOS (pre-9.2.1), watchOS (pre-2.2.1); can lead to remote code execution or memory corruption. Remediation: upgrade libxml2 to 2.9.4 or later ...

CVE-2016-5172

CVE-2016-5172 : The V8 parser used in Google Chrome/Chromium mishandles scopes, enabling a remote attacker to obtain sensitive information from arbitrary memory locations via crafted JavaScript. Affected product scope includes Google Chrome and Chromium builds prior to 53.0.2785.113. Remediation ...

CVE-2016-9189

CVE-2016-9189 concerns Pillow (Python Imaging Library fork). Affected: Pillow versions before 3.3.2. Root cause: integer overflow in Image.core.map_buffer within map.c that can be exploited via crafted image files. Impact: information disclosure (partial confidentiality) per CVSS data; local expl...

CVE-2016-9578

CVE-2016-9578 affects SPICE prior to 0.13.90 in the server’s protocol handling. The issue is caused by the server’s improper validation of incoming messages, allowing an attacker who can connect to the SPICE server to send crafted messages that trigger a crash (denial of service). The vulnerabili...

CVE-2016-9911

CVE-2016-9911 (QEMU) : A memory leak vulnerability in QEMU built with USB EHCI emulation. The leak occurs while processing packet data in ehci_init_transfer, allowing a guest user/process to leak host memory and potentially cause a DoS on the host. The available connected documents confirm the pr...

CVE-2017-1000450

OpenCV CVE-2017-1000450 affects OpenCV 3.3 and earlier, where opencv/modules/imgcodecs/src/utils.cpp: FillUniColor and FillUniGray do not validate input length, enabling an integer overflow when processing images. If the image source is remote, this can lead to remote code execution or denial of ...

CVE-2017-12184

CVE-2017-12184 affects the X.Org X server (xorg-x11-server) prior to version 1.19.5. The root cause is a missing length validation in the XINERAMA extension, which could allow a malicious X client to crash the X server or potentially execute arbitrary code. Public sources in the connected documen...

CVE-2017-18266

CVE-2017-18266 applies to xdg-utils (xdg-open) where open_envvar does not validate strings before launching the program specified by BROWSER. The issue affects versions before 1.1.3 and can enable argument-injection via a crafted URL in the BROWSER value. Multiple connected advisories confirm ups...

CVE-2017-2835

CVE-2017-2835 : An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP, specifically in versions around 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write, leading to an exploitable condition. An attacker could compr...

CVE-2017-8365

CVE-2017-8365 affects libsndfile 1.0.28 where the i2les_array function in pcm.c can cause a global buffer overflow via a crafted audio file, leading to denial of service (buffer over-read and crash). Connected advisories (Debian, Gentoo, Fedora, Mariner) note a patched release is available and ur...

CVE-2018-17469

CVE-2018-17469 affects Google/Chromium’s PDFium component: a heap-based buffer overflow in PDFium prior to 70.0.3538.67 (in PDF filter chain handling) can enable a remote attacker to trigger out-of-bounds memory reads and potentially execute code. Public sources in connected docs confirm the issu...

CVE-2018-18354

CVE-2018-18354 affects Google Chrome on Windows prior to 71.0.3578.80. The root cause is insufficient validation of external protocols in the Shell Integration component, enabling a remote attacker to launch external programs via a crafted HTML page. The vulnerability allows potential arbitrary c...

CVE-2018-5784

CVE-2018-5784 — LibTIFF 4.0.9 contains a denial-of-service vulnerability in TIFFSetDirectory (tif_dir.c) due to unvalidated declared versus actual directory entries, enabling remote attackers to trigger resource exhaustion via a crafted TIFF file. The connected IBM bulletin corroborates the same ...

CVE-2018-6067

CVE-2018-6067 is a vulnerability in Google Chrome/Chromium where the Skia library contains a buffer/heap overflow issue. Affected component: Skia inside Chrome/Chromium prior to version 65.0.3325.146. Root cause: unspecified in the provided documents beyond “buffer overflow in the Skia library.” ...

CVE-2018-6102

CVE-2018-6102 affects Google Chrome/Chromium, enabling an attacker to spoof the Omnibox (URL bar) via a crafted domain name. The vulnerability is described as a URL spoofing issue in Omnibox and is fixed in Chrome/Chromium around version 66.0.3359.117 (example Debian update notes reference 66.0.3...

CVE-2018-6553

The CVE-2018-6553 issue concerns the CUPS AppArmor profile: it confines the dnssd backend improperly due to use of hard links. A local attacker could use this to escape confinement. Affected Ubuntu versions include: <2.2.7-1ubuntu2.1 (18.04 LTS), <2.2.4-7ubuntu3.1 (17.10), <2.1.3-4ubuntu...

CVE-2019-18625

CVE-2019-18625 affects Suricata 5.0.0 and enables evasion of tcp-based signatures by spoofing a closed TCP session with injected RST/FIN packets that abuse a bad TCP Timestamp option; affected platforms include Linux and Windows clients as described in multiple sources. The connected docs confirm...

CVE-2019-18890

CVE-2019-18890 describes a SQL injection in Redmine up to versions 3.2.9 and 3.3.x before 3.3.10, allowing Redmine users to access protected information via a crafted object query. The vulnerability is caused by improper handling of input in the object query path, enabling arbitrary SQL execution...

CVE-2020-21529

CVE-2020-21529 affects fig2dev 3.2.7b, with a stack buffer overflow in bezier_spline() (genepic.c). Affected products across distros include Debian (3.2.7a-5+), Ubuntu advisories referencing fig2dev (multiple CVEs including 2020-21529), and SUSE/openSUSE, which list CVE-2020-21529 among 12 issues...

CVE-2020-4051

The CVE-2020-4051 entry affects the Dijit Editor’s LinkDialog plugin, with cross-site scripting vulnerability present in Dijit releases prior to the fixed versions. Documented affected ranges include Dijit 1.11.x through 1.16.x, with fixes implemented in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, a...

CVE-2021-37622

CVE-2021-37622 affects Exiv2 (library/CLI) and is an infinite loop vulnerability triggered when deleting IPTC data during metadata modification of a crafted image file. The issue occurs in Exiv2 v0.27.4 and earlier and can lead to denial of service if a user runs the tool on a crafted image file,...

CVE-2021-38021

CVE-2021-38021 affects the Chromium engine used by Google Chrome/Chromium. The issue is an inappropriate implementation in the referrer handling component, before version 96.0.4664.45, which can allow a remote attacker to bypass navigation restrictions via a crafted HTML page, potentially leading...

CVE-2021-4062

CVE-2021-4062 is a heap buffer overflow in the BFCache component of Chromium/ Google Chrome prior to 96.0.4664.93. The issue affects the BFCache path, enabling a remote attacker who has compromised the renderer process to potentially trigger heap corruption via a crafted HTML page. The vulnerabil...

CVE-2022-26291

CVE-2022-26291 affects lrzip, where a concurrency use-after-free between zpaq_decompress_buf() and clear_rulist() can cause a Denial of Service via a crafted lrz file. The issue is confirmed in Debian/Ubuntu advisories: fixed in lrzip 0.641-1+deb11u1 (Bullseye) and related backports, with earlier...