CVE-2017-13725

CVE-2017-13725 affects tcpdump, with a buffer over-read in IPv6 routing header parser (print-rt6.c:rt6_print) mitigated by upgrading to tcpdump 4.9.2. The vulnerability could enable information disclosure or trigger a crash due to memory handling weaknesses in the IPv6 routing header path. Remedi...

CVE-2016-9636

GStreamer vulnerability CVE-2016-9636 affects the FLIC decoder (gst/flx/gstflxdec.c, function flx_decode_delta_fli). The issue is a heap-based buffer overflow caused by a write count that can exceed the initialized buffer, allowing a remote attacker to potentially execute arbitrary code or crash ...

CVE-2017-12177

CVE-2017-12177 affects xorg-server prior to 1.19.5. The vulnerability arises from an integer overflow in ProcDbeGetVisualInfo, allowing a remote/local X server client to cause a crash or potentially execute arbitrary code. Public advisories (Debian, Arch Linux, Gentoo, Mageia, etc.) indicate the ...

CVE-2017-12197

CVE-2017-12197 affects libpam4j (Java PAM wrapper) up to and including 1.8, where authentication did not correctly enforce account status because pam_acct_mgmt() was not called. A user with a valid password for a disabled/deactivated account could bypass restrictions and access sensitive informat...

CVE-2017-12836

CVE-2017-12836 affects CVS 1.12.x when configured to use SSH for remote repositories. A remote attacker can supply a repository URL with a crafted hostname (for example, a string that triggers -oProxyCommand) to cause arbitrary code execution on the target. This is evidenced by cross-references i...

CVE-2017-8362

CVE-2017-8362 affects libsndfile 1.0.28 (flac_buffer_copy in flac.c). A crafted audio file can trigger an out-of-bounds read, leading to denial of service (invalid read and application crash). Multiple connected advisories corroborate DoS via crafted audio files and urge upgrading libsndfile to a...

CVE-2018-13100

CVE-2018-13100 concerns the Linux kernel, specifically fs/f2fs/super.c up to version 4.17.3, where improper validation of secs_per_zone in a corrupted f2fs image can trigger a divide-by-zero error. The connected advisories confirm the issue and reproduce conditions but do not provide a patch vers...

CVE-2019-16728

Summary: CVE-2019-16728 affects DOMPurify prior to 2.0.1, enabling cross-site scripting via innerHTML mutation XSS (mXSS) in SVG or MATH elements, demonstrated in Chrome and Safari. Affected component: DOMPurify (HTML, MathML, SVG sanitization code). Root cause: improper handling of innerHTML mut...

CVE-2019-18222

CVE-2019-18222 affects Arm Mbed Crypto 2.1 and Mbed TLS up to 2.19.1: the ECDSA implementation in ecdsa.c does not reduce the blinded scalar before the inverse, enabling local side-channel attacks to recover the private key. Several advisories report upstream fixes (e.g., 2.20.0, 3.0.1) and packa...

CVE-2020-20453

CVE-2020-20453 affects FFmpeg 4.2 via libavcodec/aaccoder and can cause a remote Denial of Service. Connected advisories confirm the flaw and consistently prescribe upgrading FFmpeg to patched releases (e.g., Debian security advisories fixing FFmpeg and recommending new package versions) and appl...

CVE-2020-9481

Apache Traffic Server (ATS) is affected by CVE-2020-9481. Versions 6.0.0–6.2.3, 7.0.0–7.1.9, and 8.0.0–8.0.6 are vulnerable to a HTTP/2 slow read attack, which can lead to denial of service (and is described in multiple sources as affecting ATS). The vulnerability stems from HTTP/2 handling in AT...

CVE-2021-1076

CVE-2021-1076 affects NVIDIA GPU Display Driver for Windows and Linux (kernel mode drivers nvlddmkm.sys / nvidia.ko). The vulnerability arises from improper access control in the kernel-mode component, potentially allowing denial of service, information disclosure, or data corruption. Connected a...

CVE-2021-31873

CVE-2021-31873 affects klibc prior to 2.0.9. Additions in malloc() may cause an integer overflow and a subsequent heap buffer overflow, per multiple sources. Reported impacts include crashes and potential for denial of service, with some advisories noting possible arbitrary code execution in affe...

CVE-2021-32435

CVE-2021-32435 affects abcm2ps (v8.14.11). The issue is a stack-based buffer overflow in parse.c:get_key, enabling DoS via crafted input. Public advisories confirm affected packages and fixes, with OpenSUSE/SUSE and Debian notes updating to newer abcm2ps releases (e.g., 8.14.13 in SUSE/openSUSE a...

CVE-2021-38011

CVE-2021-38011 is a use-after-free in the storage foundation of the Chromium browser engine, affecting Chromium before 96.0.4664.45. The initial description states a remote attacker could cause heap corruption via a crafted HTML page, enabling arbitrary code execution, with impact on at least the...

CVE-2021-45949

CVE-2021-45949 affects Ghostscript GhostPDL 9.50 through 9.54.0. The vulnerability is a heap-based buffer overflow in the function sampled_data_finish, which is called from sampled_data_continue and interp. This is the specific flaw described in the provided documents. The vulnerability is associ...

CVE-2022-1921

CVE-2022-1921 involves an Integer overflow in the GStreamer gst-avi-demux path (avidemux element), enabling a heap overwrite while parsing AVI files and potentially allowing arbitrary code execution. Publicly documented in multiple advisories (e.g., Debian DSA-5204, Mageia MGASA-2022-0322, AlmaLi...

CVE-2022-26356

CVE-2022-26356 describes a race in Xen between log-dirty tracking and log-dirty hypercalls. Activation of log-dirty via XEN_DMOP_track_dirty_vram can race with tearing down structures from a prior log-dirty mode, causing entries to be written into freed slots and resulting in a memory leak. Vulne...

CVE-2022-30785

NTFS-3G contains a local memory read/write vulnerability triggered by a file handle created in fuse_lib_opendir and later used in fuse_lib_readdir when using libfuse-lite. The issue affects NTFS-3G up to 2021.8.22 (through libfuse-lite) and can enable arbitrary memory access. Public exploit detai...

CVE-2023-1993

CVE-2023-1993 is a vulnerability in the Wireshark LISP dissector causing a denial-of-service via a crafted capture file or packet injection. A large loop in the LISP dissector leads to resource exhaustion when processing certain inputs. Affected Wireshark versions span 4.0.0–4.0.4 and 3.6.0–3.6.1...

CVE-2023-42883

CVE-2023-42883 involves WebKitGTK/WebKit-based components where processing an image can cause a denial-of-service due to an underlying memory handling issue. The vulnerability is addressed in Apple platforms (Safari 17.2, macOS Sonoma 14.2, iOS 17.2/iPadOS 17.2, watchOS 10.2, tvOS 17.2; with olde...

CVE-2024-26839

CVE-2024-26839 affects the Linux kernel: a memleak in IB/hfi1’s init_credit_return when dma_alloc_coherent fails to allocate dd->cr_base[i].va; proper cleanup should deallocate dd->cr_base and any previously allocated dd->cr_base[i] to avoid leaks. The issue is resolved by the kernel fix...

CVE-2024-26845

CVE-2024-26845 pertains to the Linux kernel scsi: target: core logic. The issue arises when an abort handled by iSCSI is added to tmr_list but is not processed by target core, causing a LUN_RESET that traverses tmr_list to wait on a refcounted abort that is never completed. Symptoms include messa...

CVE-2024-26970

CVE-2024-26970 affects the Linux kernel clock driver for Qualcomm IPQ6018 (clk: qcom: gcc-ipq6018). Root cause: frequency table arrays lacked a terminating empty element, risking out-of-bounds access when traversed by qcom_find_freq() or qcom_find_freq_floor(). Mitigation: patch adds an empty ter...

CVE-2024-27405

CVE-2024-27405 describes a Linux kernel issue in usb: gadget: ncm where the unwrap logic can drop all datagrams when a second NTB is faulty due to a leftover byte after a proper NTB. The trigger observed during tethering over NCM with Windows 11 host. Root cause: if there are leftover bytes, unwr...

CVE-2024-35849

CVE-2024-35849 affects the Linux kernel btrfs_ioctl_logical_to_ino path. The issue is an information leak: a struct btrfs_data_container allocated with kvmalloc() is copied back to user space without zero-filling, exposing uninitialized memory (Bytes 40-65535) to user-space. The root cause is lac...

CVE-2024-46812

CVE-2024-46812 concerns the Linux kernel DRM/AMD display code. The vulnerability arises from memory access issues addressed by skipping inactive planes in ModeSupportAndSystemConfiguration, as reported by Coverity. The fix is implemented in the kernel to prevent illegal accesses by not processing...

CVE-2024-46956

CVE-2024-46956 affects Artifex Ghostscript (psi/zfile.c) with an out-of-bounds data access in filenameforall that can lead to arbitrary code execution on Ghostscript versions up to 10.04.0. Connected advisories confirm this vulnerability and provide patch guidance; mitigation is to update Ghostsc...

CVE-2025-22042

CVE-2025-22042 pertains to the Linux kernel’s ksmbd subsystem. The issue was a missing bounds check in the creation of a lease context within ksmbd, which could lead to out-of-bounds conditions. The connected documents confirm that this bound-check was added/fixed in the kernel to resolve the vul...

CVE-2025-37911

The CVE-2025-37911 vulnerability affects the bnxt_en driver in the Linux kernel. It arises when ethtool -w retrieves a FW core dump: the DMA’d segment list length reported by the FW can exceed the allocated info->dest_buf, causing an out-of-bounds copy and memory corruption. Root cause is an u...

CVE-2025-38575

In CVE-2025-38575, the Linux kernel ksmbd memory handling was corrected: memory allocated by aead_request_alloc() must be freed with aead_request_free() to ensure sensitive crypto data is zeroed before freeing. This resolves a local-attack surface (AV:L/AC:L/PR:L/UI:N/S:U) with a MEDIUM base scor...

CVE-2005-2088

The CVE-2005-2088 vulnerability affects the Apache HTTP Server when acting as an HTTP proxy. Specifically, versions before 1.3.34 and 2.0.x before 2.0.55 are susceptible. The issue arises from handling a request containing both Transfer-Encoding: chunked and Content-Length, causing the body to be...

CVE-2007-1864

CVE-2007-1864 is a heap buffer overflow in the bundled libxmlrpc extension of PHP. Affected environments: PHP before 4.4.7 and PHP 5.x before 5.2.2. The available connected documents describe this vulnerability as exploitable via remote input in the xmlrpc extension that could lead to code execut...

CVE-2010-2531

The vulnerability CVE-2010-2531 affects PHP’s var_export() in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3, where fatal errors cause the output buffer to be flushed to the user even if display_errors is off. This can allow remote attackers to obtain sensitive information by triggering conditions th...

CVE-2010-4081

CVE-2010-4081 affects the Linux kernel (sound/pci/rme9652/hdspm.c: snd_hdspm_hwdep_ioctl). The root cause is failure to initialize a structure, enabling local users to read potentially sensitive kernel stack memory via SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO. Affected: kernel versions prior to 2.6.36-r...

CVE-2014-0401

CVE-2014-0401: Unspecified vulnerability in the MySQL Server component affects Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier. It allows remote authenticated users to affect availability via unknown vectors. The Connected documents (e.g., MiracleLinux AXSA advisory, R...

CVE-2014-3467

GNUTLS/library libtasn1 vulnerability CVE-2014-3467 is due to multiple issues in the DER decoder of GNU Libtasn1 up to version 3.5.x (pre-3.6), exploited by crafted ASN.1 data to cause a denial of service via out-of-bounds read. The issue is confirmed in multiple advisories (F5 SOL15423, ALAS-201...

CVE-2014-4341

MIT Kerberos 5 (krb5) CVE-2014-4341 is a remote DoS in which an attacker can cause a buffer over-read and crash a GSSAPI session by injecting invalid tokens. Public sources tie this to krb5 releases prior to 1.12.2 (upstream flag) and show impact on servers/applications using GSSAPI SPNEGO. The F...

CVE-2014-9644

CVE-2014-9644 affects the Linux kernel Crypto API prior to 3.18.5. It allows a local user to load arbitrary kernel modules by abusing a bind() call on an AF_ALG socket with a module template expression (eg, vfat(aes)) in salg_name. This is a local, privilege-related issue, separate from CVE-2013-...

CVE-2015-1420

CVE-2015-1420 is a Linux kernel race condition in fs/fhandle.c (handle_to_path) up to version 3.19.1. An attacker could bypass size restrictions by manipulating handle_bytes during handle_to_path execution to trigger reads from additional memory locations, enabling local read access to memory. Th...

CVE-2016-0608

CVE-2016-0608 is an unspecified vulnerability in Oracle MySQL Server and MariaDB affecting multiple tracks (MySQL 5.5.46 and earlier, 5.6.27 and earlier, 5.7.9; MariaDB before 5.5.47; MySQL 10.0.x before 10.0.23; 10.1.x before 10.1.10) that allows remote authenticated users to affect availability...

CVE-2017-0359

Diffoscope is vulnerable to arbitrary file overwrite: versions before 77-1 may write to arbitrary locations on disk based on untrusted archive contents. Upstream fix shipped in 77; advisories (Arch Linux ASA-201702-14, Fedora updates, Debian/CVE records) note upgrade to 77-1 or newer to mitigate....

CVE-2017-12187

CVE-2017-12187 affects xorg-x11-server before 1.19.5, where the RENDER extension lacked proper length validation. This weakness can allow a malicious X client to crash the X server or potentially execute arbitrary code. The issue is documented across multiple sources (NVD entry for CVE-2017-12187...

CVE-2017-15396

CVE-2017-15396 is described in the connected IBM ICU bulletin as a stack buffer overflow in ICU’s NumberingSystem (C/C++) that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The description in the initial document notes ICU for C/C++ before 60.2 (used in V8/Chro...

CVE-2017-16352

CVE-2017-16352 affects GraphicsMagick 1.3.26 and is a heap-based buffer overflow in the Display visual image directory feature of DescribeImage() (magick/describe.c). Trigger: running identify on a specially crafted MIFF file with the verbose flag. Impact details in the vulnerability describe onl...

CVE-2017-16611

Summary: CVE-2017-16611 affects libXfont (<=1.5.4) and libXfont2 (

CVE-2017-5856

CVE-2017-5856 affects QEMU megasas SAS emulation: memory leak in megasas_handle_dcmd() in hw/scsi/megasas.c allows a local privileged guest to cause host memory consumption (DoS) via MegaRAID Firmware Interface (MFI) commands with sglist sizes exceeding 2 GB. Connected documents confirm the vulne...

CVE-2017-7758

CVE-2017-7758 describes an out-of-bounds read in the Opus encoder when the number of channels in an audio stream changes during encoding. Affected products include Firefox < 54, Firefox ESR < 52.2, and Thunderbird

CVE-2018-1000132

CVE-2018-1000132 affects Mercurial 4.5 and earlier, with an Incorrect Access Control (CWE-285) in the Protocol server that can lead to unauthorized data access over the network. The vulnerability is explicitly stated to have been fixed in Mercurial 4.5.1. Connected advisories reference affected p...

CVE-2018-17465

CVE-2018-17465 affects Google Chrome/Chromium (before 70.0.3538.67) where a use-after-free/memory misreference in V8 could allow a remote attacker to manipulate objects via a crafted HTML page. Public advisories (e.g., Debian/Arch/Gentoo/Debian DSA updates) confirm V8-related impact and the need ...