CVE-2025-37839

CVE-2025-37839 (Linux kernel) fixes a journal-related logic flaw in jbd2. The root cause was the incorrect use of sb->s_sequence to determine journal emptiness; it should rely on sb->s_start, which is set earlier. Since 0 is a valid transaction ID, the previous check could spuriously trigge...

CVE-2025-37854

CVE-2025-37854 affects the Linux kernel drm/amdkfd path. A use-after-free race occurs when mode1 reset is used to recover a hung GPU: after KFD signals user space to abort, the cleanup may free or reuse system memory (and VRAM) still in use by user queues, potentially corrupting data structures a...

CVE-2015-2594

CVE-2015-2594 affects Oracle VM VirtualBox before 4.0.32, 4.1.40, 4.2.32, and 4.3.30. The vulnerability is described as unspecified with potential impacts to confidentiality, integrity, and availability via unknown Core-related vectors (local access). Debian/OpenVAS entries indicate the issue is ...

CVE-2015-7696

Info-ZIP UnZip 6.0 is vulnerable to a heap-based buffer over-read that can crash the application or possibly allow arbitrary code execution when processing crafted password-protected ZIP archives, possibly related to an Extra-Field size value. This CVE (CVE-2015-7696) is widely reported across di...

CVE-2016-0749

CVE-2016-0749 affects SPICE software (remote display system for VMs). The vulnerability stems from the smartcard interaction in SPICE, enabling a remote attacker to cause a heap-based buffer overflow by connecting to a guest VM, potentially crashing the QEMU-KVM host process or executing arbitrar...

CVE-2016-6132

CVE-2016-6132 affects the GD Graphics Library (libgd) . The vulnerability exists in the function gdImageCreateFromTgaCtx for libgd versions before 2.2.3 , where processing a crafted TGA file can lead to a remote denial of service via an out-of-bounds read . Impact is described as potentially trig...

CVE-2016-8677

CVE-2016-8677 affects ImageMagick. The AcquireQuantumPixels function (MagickCore/quantum.c) can be triggered by a crafted image to cause a memory allocation failure, producing an unspecified impact. Affected: ImageMagick versions before 7.0.3-1. Fix: upgrade to 7.0.3-1 or newer (patched release).

CVE-2016-9102

CVE-2016-9102 is a memory-leak vulnerability in QEMU's 9pfs/9p.c v9fs_xattrcreate path. The issue allows a local privileged user (guest) to trigger memory consumption escalating to a DoS by sending a large number of Txattrcreate messages with the same fid. Affected component: hw/9pfs/9p.c (v9fs_x...

CVE-2017-7752

CVE-2017-7752 is a use-after-free vulnerability triggered by specific user interactions with the input method editor (IME) in certain languages. The flaw is reported to affect Mozilla Firefox versions before 54, Firefox ESR before 52.2, and Thunderbird before 52.2. The impacted component is tied ...

CVE-2017-9524

CVE-2017-9524 affects the qemu-nbd server in QEMU when built with NBD Server support. The advisory notes a remote-denial-of-service risk caused by a failure to ensure full initialization before negotiating with the client in nbd_negotiate, allowing a remote attacker to trigger a segmentation faul...

CVE-2018-10998

CVE-2018-10998 is an Exiv2 0.26 ReadMetadata issue in jp2image.cpp where an incorrect Safe::add call triggers SIGABRT, leading to denial of service. Public advisory entries (MiracleLinux, EulerOS, NewStart CGSL/AL2) enumerate this CVE among Exiv2 0.26/0.27.x family issues. Remediation: upgrade Ex...

CVE-2018-17206

Open vSwitch 2.7.x–2.7.6 contains a buffer over-read in the decode_bundle function (lib/ofp-actions.c) during BUNDLE action decoding, classified as CVE-2018-17206. The issue is documented in multiple advisories (e.g., RHSA/RHSA-like entries) and Debian/DLA disclosures; exploitation details and ex...

CVE-2018-5801

CVE-2018-5801 – LibRaw NULL pointer dereference . The provided documents identify LibRaw versions prior to 0.18.7 containing a vulnerability in the LibRaw::unpack() function (src/libraw_cxx.cpp) that can be exploited to trigger a NULL pointer dereference. This condition may allow crashes or denia...

CVE-2018-6072

CVE-2018-6072 is a PDFium-related vulnerability in Google Chrome prior to 65.0.3325.146. Description: an integer overflow in the PDFium library could lead to heap corruption, potentially exploitable via a crafted PDF file. Connected sources confirm PDFium involvement and the Chrome 65.0.3325.146 ...

CVE-2018-6074

Google Chrome prior to version 65.0.3325.146 is vulnerable to a Mark-of-the-Web bypass in downloads. The root cause is the failure to apply the Mark-of-the-Web on downloaded pages, enabling a remote attacker to bypass OS-level protections via a crafted HTML page. The vulnerability is addressed in...

CVE-2018-6106

CVE-2018-6106 affects the Chromium/Google Chrome stack (Chromium project) and is tied to the V8 JavaScript engine. The issue arises with an asynchronous generator that may return an incorrect state, allowing a remote attacker to potentially exploit object corruption via a crafted HTML page. Publi...

CVE-2018-6108

CVE-2018-6108 affects Google Chrome/Chromium URL Formatter, where incorrect handling of confusable characters (IDN homographs) could enable domain spoofing via a crafted HTML page. Affected product: Google Chrome (and Chromium) prior to Chrome 66.0.3359.117. Root cause: misprocessing of internati...

CVE-2018-6133

CVE-2018-6133 affects Google Chrome/Chromium URL formatting: incorrect handling of confusable characters in the URL Formatter allowed domain spoofing via IDN homographs. Affected versions are Chrome prior to 67.0.3396.62 (Chromium before 67.0.3396.62). The CNVD entry notes an attacker could explo...

CVE-2018-6178

CVE-2018-6178 is a UI spoofing vulnerability in Google Chrome/Chromium extensions. A crafted extension could elide or misrepresent UI in the DevTools/infobar flow, enabling a remote attacker to hide Chrome security UI. Affected product: Chromium/Chrome prior to 68.0.3440.75. Root cause: UI spoofi...

CVE-2018-7418

CVE-2018-7418 – Wireshark SIGCOMP dissector crash . The SIGCOMP dissector in Wireshark (versions 2.2.0–2.2.12 and 2.4.0–2.4.4) could crash due to an incorrect extraction of the length value. The issue was addressed in epan/dissectors/packet-sigcomp.c by correcting the length value extraction, mit...

CVE-2019-19709

CVE-2019-19709 affects MediaWiki up to version 1.33.1, where an attacker can bypass the Title_blacklist protection by starting from an arbitrary title, creating a non-resolvable redirect for the target page, and using redirect=1 in the action API during edit. The issue is demonstrated across mult...

CVE-2020-21535

CVE-2020-21535 affects fig2dev 3.2.7b (Xfig/Transfig) with a segmentation fault in gencgm_start (gencgm.c). OpenSUSE/SUSE advisories indicate this is fixed in fig2dev 3.2.8 Patchlevel 8b; update to that version to remediate. Other linked sources list the vulnerability among multiple CVEs in the s...

CVE-2021-20001

CVE-2021-20001 affects debian-edu-config prior to 2.12.16, where insecure permissions on user web shares (~/public_html) could allow privilege escalation. Debian advisories (DSA-5072-1, DLA-2918-1) document the issue and its fix; for Debian 9, the fix is in 1.929+deb9u5. Multiple feeds (NVD entry...

CVE-2021-31870

CVE-2021-31870 concerns klibc before version 2.0.9, where an integer overflow in calloc() due to multiplication can cause a heap buffer overflow. Multiple connected advisories/reporting broaden the impact to include related issues in the same klibc package (e.g., 64-bit allocation/memory handling...

CVE-2021-37999

CVE-2021-37999 stems from insufficient data validation in the Chromium-based New Tab Page component before version 95.0.4638.69, enabling a remote attacker to inject arbitrary scripts/HTML via a crafted HTML page. Connected advisories confirm the issue affects Google Chrome/Chromium, with remedia...

CVE-2021-4067

CVE-2021-4067: A use-after-free in the Chromium window manager before version 96.0.4664.93 allows a remote attacker to potentially execute arbitrary code or spoof content through crafted web content. Affected product: Chromium browser engine (window manager component). Root cause: use-after-free ...

CVE-2022-23483

CVE-2022-23483 affects xrdp prior to version 0.9.21. An Out of Bound Read exists in libxrdp_send_to_channel(). No workarounds are documented in the connected sources. Debian and Alpine advisories, Astra Linux bulletin, and Fedora/ALT Linux entries indicate the fix is to upgrade to a version where...

CVE-2023-52699

In CVE-2023-52699, the Linux kernel SysV locking flaw caused sleep in atomic context because sb_bread() was invoked with pointers_lock held. The root cause spans historical locking changes: replacing BKL with a sysvfs-private rwlock (Linux 2.5.12) introduced a write_lock → read_lock deadlock; the...

CVE-2024-35955

CVE-2024-35955 : Linux kernel vulnerability in kprobe registration that could cause a use-after-free if module unload changes MODULE_STATE from LIVE/GOING to UNFORMED between address checks. The fix switches to using only __module_text_address() and performs try_module_get(module) while MODULE_ST...

CVE-2007-2691

CVE-2007-2691 affects MySQL: versions 4.1.x before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 do not require the DROP privilege for RENAME TABLE statements, enabling a remote authenticated user to rename arbitrary tables. Impact: potential arbitrary table renames by authenticated remote...

CVE-2009-2687

CVE-2009-2687 affects the PHP Exif module’s exif_read_data in PHP versions before 5.2.10. A remote attacker can cause a denial of service (crash) by supplying a malformed JPEG image with invalid offset fields. The issue is part of a broader PHP-related set of vulnerabilities referenced in multipl...

CVE-2009-3301

CVE-2009-3301: OpenOffice.org before 3.2 is affected by an memory corruption in sprmTDefTable when parsing Word documents, caused by an underflow in a Word table property modifier. This can trigger a denial of service (crash) and potentially allow arbitrary code execution if a crafted Word docume...

CVE-2010-3296

CVE-2010-3296 affects the Linux kernel driver cxgb3 (cxgb_extension_ioctl in drivers/net/cxgb3/cxgb3_main.c). The advisory states that the code path in kernels up to 2.6.36-rc5 does not properly initialize a structure member, allowing a local user to potentially read sensitive data from kernel st...

CVE-2010-4253

CVE-2010-4253 is confirmed in OpenOffice/OpenOffice Impress. The vulnerability is a heap-based buffer overflow in Impress of OpenOffice.org 2.x and 3.x (before 3.3) triggered by a crafted PNG inside an ODF or Microsoft Office document (e.g., PowerPoint), leading to a remote crash or possible arbi...

CVE-2012-1149

CVE-2012-1149 concerns an integer overflow in the vclmi.dll module of OpenOffice.org/OpenOffice and LibreOffice, triggered by a crafted embedded image object in a .DOC file and leading to a heap-based overflow. Affected products include OpenOffice 3.3, OpenOffice 3.4 Beta, and LibreOffice prior t...

CVE-2012-6075

CVE-2012-6075 is a buffer overflow in the e1000_receive function of the e1000 device driver (hw/e1000.c) used by QEMU 1.3.0-rc2 and related versions when SBP and LPE flags are disabled. The vulnerability could allow a remote attacker to crash the guest OS or potentially execute arbitrary code ins...

CVE-2014-0459

CVE-2014-0459 is an Oracle Java SE vulnerability (affecting Java SE 7u51/8 and Java SE Embedded 7u51) tied to the 2D component that could allow remote denial of service. The connected IBM advisories (and IBM’s WebSphere/InfoSphere Streams bulletins) corroborate the CVE, listing CVE-2014-0459 amon...

CVE-2014-8129

CVE-2014-8129 affects LibTIFF 4.0.3, enabling remote users to trigger a denial of service (out-of-bounds write) via a crafted TIFF image. The issue is tied to a failure to verify BitsPerSample = 2 in tif_next.c and to the t2p_sample_lab_signed_to_unsigned path in tiff2pdf.c. Various advisories no...

CVE-2014-9904

CVE-2014-9904 affects the Linux kernel ALSA subsystem: snd_compress_check_input in sound/core/compress_offload.c before 3.17 fails to check for an integer overflow. This can allow local users to cause a denial of service (insufficient memory allocation) or other unspecified impact via a crafted S...

CVE-2015-1863

CVE-2015-1863 is a heap-based buffer overflow in wpa_supplicant (versions 1.0–2.4) that can be triggered via crafted SSID information in P2P management frames, allowing denial of service, memory disclosure, or potential arbitrary code execution. Public reports confirm the issue and Debian/CentOS ...

CVE-2016-0592

CVE-2016-0592 concerns Oracle VM VirtualBox. The vulnerability affects Oracle VM VirtualBox components in VirtualBox builds older than 4.3.36 and older than 5.0.14, with the Core subsystem being implicated. The documented impact is an ability for local users to affect availability via unknown vec...

CVE-2016-1522

CVE-2016-1522 affects Graphite 2 Libgraphite (Graphite2 1.2.4) used in Firefox/Firefox ESR before 43.0. Code.cpp does not account for recursive load calls during a size check, enabling a remote attacker to trigger a denial of service (heap-based buffer overflow) or possibly execute arbitrary code...

CVE-2016-1523

CVE-2016-1523 concerns Graphite 2 Libgraphite’s SillMap::readFace in FeatureMap.cpp, used by Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1. A mis-handled return value can allow remote attackers to cause denial of service via a crafted Graphite smart font. Affected component is Gr...

CVE-2016-5126

Summary of CVE-2016-5126 family in Debian DLA-1927-1 (qemu security update) Debian DLA-1927-1 documents multiple QEMU vulnerabilities, including CVE-2016-5126 (heap-based buffer overflow in iscsi_aio_ioctl in block/iscsi.c) which allows a local guest user to crash the QEMU process or potentially ...

CVE-2016-9635

GStreamer vulnerability CVE-2016-9635 affects the FLIC decoder (gst/flx/gstflxdec.c) where a skip_count beyond the initialized buffer can cause a heap-based overflow. A remote attacker could execute arbitrary code or cause a crash. Affected: GStreamer up to version 1.10.1 (before 1.10.2). Remedia...

CVE-2017-12599

CVE-2017-12599 (OpenCV) : OpenCV up to version 3.3 contains an out-of-bounds read in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image via cv::imread. Connected documents confirm this CVE appears in OpenCV-related advisories; the vulnerability is tied to reading image data and could tri...

CVE-2017-12604

OpenCV CVE-2017-12604 affects OpenCV up to version 3.3, where an out-of-bounds write occurs in FillUniColor (utils.cpp) when reading an image via cv::imread. The vulnerability is tied to memory write behavior and is documented across multiple advisories; Debian LTS notes patches in 2.4.9.1+dfsg1-...

CVE-2017-13020

tcpdump vulnerability CVE-2017-13020 is a buffer over-read in the VTP parser (vtp_print) of the tcpdump code path. It affects versions prior to 4.9.2 and can potentially lead to memory disclosure or crash scenarios as indicated by CVSS scores in public advisories. The canonical remediation is upg...

CVE-2017-13063

GraphicsMagick 1.3.26 is affected by CVE-2017-13063, a heap-based buffer overflow in GetStyleTokens (coders/svg.c:314). Debian/Ubuntu/Fedora advisories list numerous related GraphicsMagick CVEs and note potential denial of service or arbitrary code execution when processing malformed images. Miti...

CVE-2017-13084

CVE-2017-13084 describes a vulnerability in WPA/WPA2 where the Station-To-Station-Link (STK) key can be reinstalled during the PeerKey handshake. An attacker within wireless range may replay, decrypt, or spoof frames by exploiting STSL STK reinstallation. Public sources confirm this as part of th...