CVE-2015-1863

CVE-2015-1863 is a heap-based buffer overflow in wpa_supplicant (versions 1.0–2.4) that can be triggered via crafted SSID information in P2P management frames, allowing denial of service, memory disclosure, or potential arbitrary code execution. Public reports confirm the issue and Debian/CentOS ...

CVE-2016-0592

CVE-2016-0592 concerns Oracle VM VirtualBox. The vulnerability affects Oracle VM VirtualBox components in VirtualBox builds older than 4.3.36 and older than 5.0.14, with the Core subsystem being implicated. The documented impact is an ability for local users to affect availability via unknown vec...

CVE-2016-1522

CVE-2016-1522 affects Graphite 2 Libgraphite (Graphite2 1.2.4) used in Firefox/Firefox ESR before 43.0. Code.cpp does not account for recursive load calls during a size check, enabling a remote attacker to trigger a denial of service (heap-based buffer overflow) or possibly execute arbitrary code...

CVE-2016-1523

CVE-2016-1523 concerns Graphite 2 Libgraphite’s SillMap::readFace in FeatureMap.cpp, used by Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1. A mis-handled return value can allow remote attackers to cause denial of service via a crafted Graphite smart font. Affected component is Gr...

CVE-2016-5126

Summary of CVE-2016-5126 family in Debian DLA-1927-1 (qemu security update) Debian DLA-1927-1 documents multiple QEMU vulnerabilities, including CVE-2016-5126 (heap-based buffer overflow in iscsi_aio_ioctl in block/iscsi.c) which allows a local guest user to crash the QEMU process or potentially ...

CVE-2016-9635

GStreamer vulnerability CVE-2016-9635 affects the FLIC decoder (gst/flx/gstflxdec.c) where a skip_count beyond the initialized buffer can cause a heap-based overflow. A remote attacker could execute arbitrary code or cause a crash. Affected: GStreamer up to version 1.10.1 (before 1.10.2). Remedia...

CVE-2017-12604

OpenCV CVE-2017-12604 affects OpenCV up to version 3.3, where an out-of-bounds write occurs in FillUniColor (utils.cpp) when reading an image via cv::imread. The vulnerability is tied to memory write behavior and is documented across multiple advisories; Debian LTS notes patches in 2.4.9.1+dfsg1-...

CVE-2017-13020

tcpdump vulnerability CVE-2017-13020 is a buffer over-read in the VTP parser (vtp_print) of the tcpdump code path. It affects versions prior to 4.9.2 and can potentially lead to memory disclosure or crash scenarios as indicated by CVSS scores in public advisories. The canonical remediation is upg...

CVE-2017-13063

GraphicsMagick 1.3.26 is affected by CVE-2017-13063, a heap-based buffer overflow in GetStyleTokens (coders/svg.c:314). Debian/Ubuntu/Fedora advisories list numerous related GraphicsMagick CVEs and note potential denial of service or arbitrary code execution when processing malformed images. Miti...

CVE-2017-13084

CVE-2017-13084 describes a vulnerability in WPA/WPA2 where the Station-To-Station-Link (STK) key can be reinstalled during the PeerKey handshake. An attacker within wireless range may replay, decrypt, or spoof frames by exploiting STSL STK reinstallation. Public sources confirm this as part of th...

CVE-2017-14040

OpenJPEG 2.2.0 has an invalid memory write in bin/jp2/convert.c (tgatoimage), causing a crash in tgatoimage and potentially remote denial of service or other impact. This CVE is CVE-2017-14040. Connected advisories/documents consistently describe the affected component and crash/DoS potential; no...

CVE-2017-14160

The CVE-2017-14160 issue affects Xiph.Org libvorbis, specifically the bark_noise_hybridmp function in psy.c of version 1.3.5, which can be triggered by a crafted MP4 file to cause out-of-bounds access and a denial of service (and possibly other impact). Several advisories note this vulnerability ...

CVE-2017-3635

CVE-2017-3635 affects Oracle MySQL Connectors (Connector/C) with affected versions 6.1.10 and earlier. The issue allows a low-privileged, network-remote attacker to cause a hang or crash (DOS) of MySQL Connectors; documentation notes proper use of mysql_stmt_close. Exploitation details are not pr...

CVE-2017-5526

CVE-2017-5526 affects QEMU, specifically a memory leak in hw/audio/es1370.c. A local privileged guest can unplug many devices to exhaust host memory and crash the QEMU process (DoS). No patch/version details are provided in the connected documents; monitor vendor advisories for fixes.

CVE-2017-8924

CVE-2017-8924 affects Linux kernel

CVE-2017-9098

CVE-2017-9098 affects ImageMagick prior to 7.0.5-2 and GraphicsMagick prior to 1.3.24. The vulnerability stems from uninitialized memory in the RLE decoder ReadRLEImage, caused by a missing initialization step in coders/rle.c. This can allow an attacker to leak sensitive process memory from a lon...

CVE-2017-9936

LibTIFF 4.0.8 contains a memory-leak vulnerability in tif_jbig.c (CVE-2017-9936) that can allow a crafted TIFF document to cause a remote denial of service. Connected EulerOS/Nessus entries corroborate LibTIFF exposure but do not specify a patch. No additional details about exploit methods or fix...

CVE-2017-9993

FFmpeg vulnerability CVE-2017-9993 allows reading arbitrary files via crafted HLS playlists by not properly restricting HTTP Live Streaming filename extensions and demuxer names. Affected are FFmpeg releases prior to 2.8.12, 3.0.x (3.0.0–3.0.x with 3.1.x before 3.1.9), 3.2.x before 3.2.6, and 3.3...

CVE-2018-1089

CVE-2018-1089 affects 389-ds-base: long search filters with characters needing escapes could cause a buffer overflow, enabling a remote, unauthenticated attacker to crash ns-slapd via a crafted LDAP request (denial of service). Affected versions include 389-ds-base before 1.4.0.9, 1.3.8.1, and 1....

CVE-2018-5334

Wireshark IXVeriWave file parser vulnerability (CVE-2018-5334) affects Wireshark 2.4.0–2.4.3 and 2.2.0–2.2.11. Root cause: incorrect bounds checks on the signature timestamp in wiretap/vwr.c, leading to a crash. Impact: potential denial of service via crafted packets. Remediation: upgrade to fixe...

CVE-2018-5800

The vulnerability CVE-2018-5800 targets LibRaw, specifically the LibRaw::kodak_ycbcr_load_raw() function in internal/dcraw_common.cpp. It affects LibRaw versions prior to 0.18.7 and can cause a heap-based buffer overflow, leading to a crash. This is confirmed in the linked vulnerability set (CVE-...

CVE-2018-6049

CVE-2018-6049 refers to an incorrect security UI in the permissions prompt of Google Chrome before version 64.0.3282.119. The flaw allows a remote attacker to spoof the origin for which a permission is granted via a crafted HTML page, effectively deceiving the user and potentially granting permis...

CVE-2018-6090

CVE-2018-6090 refers to a heap buffer overflow in Skia used by Google Chrome before 66.0.3359.117, allowing remote code execution inside the sandbox via a crafted HTML page. Connected sources confirm the flaw affects Chrome/Chromium’s Skia component and state that the fix is included in Chrome 66...

CVE-2018-6094

CVE-2018-6094 affects Google Chrome/Chromium, where a regression in GarbageCollection (Oilpan) could enable a remote attacker to exploit heap corruption via a crafted HTML page. The vulnerability is documented as fixed in Chrome/Chromium around version 66.0.3359.117 (e.g., Debian/ Gentoo advisori...

CVE-2018-6095

The CVE-2018-6095 entry relates to Google Chrome’s Blink component. It describes an issue where the file picker could be dismissed inappropriately on keyboard events, allowing a remote attacker to read local files via a crafted HTML page. Affected product: Google Chrome/Blink (before version 66.0...

CVE-2018-6107

CVE-2018-6107 is a URL spoofing vulnerability in Google Chrome/Chromium caused by incorrect handling of confusable characters in the URL Formatter (IDN homographs). A remote attacker could spoof domains via crafted domain names. The issue affected Chrome/Chromium versions prior to 66.0.3359.117 a...

CVE-2018-9018

CVE-2018-9018 affects GraphicsMagick 1.3.28, where a divide-by-zero in ReadMNGImage (png.c) can be triggered by a crafted MNG file. This remote flaw could cause the GraphicsMagick process to crash and facilitate a denial of service. The initial description provides the vulnerability and impact; n...

CVE-2020-6078

libmicrodns 0.1.0 is affected by CVE-2020-6078, where mdns_recv does not validate the return value of mdns_read_header, causing uninitialized variable usage and a null pointer dereference that can crash the service. This is one of multiple mDNS-related issues reported for libmicrodns. Evidence in...

CVE-2021-32278

CVE-2021-32278 affects FAAD2 up to version 2.10.0, with a heap-buffer-overflow in lt_prediction (lt_predict.c) that can lead to code execution. Connected bulletins confirm the issue and link it to FAAD2 across multiple distributions. Advisories (Debian DSA-5109, Debian DLA-2792, Ubuntu USN-6313-1...

CVE-2022-23482

CVE-2022-23482 affects the xrdp server: prior to version 0.9.21, it contains an out-of-bounds read in the function xrdp_sec_process_mcs_data_CS_CORE(). Upgrading is recommended to mitigate the vulnerability; multiple advisories note fixes in 0.9.21 (and later) across Debian, Alpine, and other dis...

CVE-2023-51782

The CVE-2023-51782 issue affects the Linux kernel (net/rose/af_rose.c) and is a use-after-free in rose_ioctl caused by a race in rose_accept. Affected versions are before 6.6.8. The vulnerability can lead to local privilege escalation or kernel crash. Mitigation: upgrade to Linux kernel 6.6.8 or ...

CVE-2023-52691

CVE-2023-52691 concerns the Linux kernel’s DRM AMD power management path. The issue is a double-free in the AMD GPU driver flow: when allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free fields, and if control flow re...

CVE-2023-52693

The CVE-2023-52693 issue affects the Linux kernel ACPI video backlight code. Root cause: acpi_get_parent() can fail (e.g., acpi_ut_acquire_mutex() failure) and pass an uninitialized acpi_parent to acpi_get_pci_dev() during acpi_video_dev_register_backlight(). Impact: potential incorrect parent ha...

CVE-2024-28130

CVE-2024-28130 affects OFFIS DCMTK 3.6.8 (DVPSSoftcopyVOI_PList::createFromImage) with a malformed file enabling arbitrary code execution. Public references in Debian (DCMTK 3.6.5-1+deb11u1 fix), Ubuntu security advisory USN-7010-1, and Fedora dcmtk 3.6.9-2.fc42 indicate multiple distributions ha...

CVE-2024-35791

CVE-2024-35791 affects the Linux kernel KVM: SVM subsystem. It describes a use-after-free in svm_register_enc_region() that is mitigated by flushing converted pages under the kvm lock before releasing the lock, preventing region/pages from being freed by another task. The fix is a patch to perfor...

CVE-2024-42314

CVE-2024-42314 (Linux kernel) affects btrfs by a use-after-free in the extent map when adding pages to compressed bio. The root cause is computing add_size after dropping the extent map reference; patch fixes this by computing add_size before releasing the reference. The NVD entry marks this as h...

CVE-2024-58054

CVE-2024-58054 concerns the Linux kernel staging media driver for max96712. The issue causes a kernel oops when removing the module, due to a pointer mix-up in v4l2_i2c_subdev_init(): i2c_set_cliendata() overwrites the private pointer with the struct driver data (sd) instead of the driver’s priva...

CVE-2025-37958

CVE-2025-37958 affects the Linux kernel THP path. The issue arises when migrating a THP: concurrent access to the PMD migration entry during a deferred split scan could dereference an invalid address. The fix adds a check of the PMD migration entry and returns early, since the PMD migration entry...

CVE-2025-38079

The CVE-2025-38079 entry concerns a vulnerability in the Linux kernel crypto/algif_hash: a double free in hash_accept when accept(2) is used on an algif_hash socket with MSG_MORE and crypto_ahash_import fails. This leads to a slab-use-after-free due to sk2 being freed in both hash_accept and af_a...

CVE-2007-1667

CVE-2007-1667 is described in the initial entry as multiple integer overflows in (1) XGetPixel in X.Org libx11 before 1.0.3 and (2) XInitImage in xwd.c for ImageMagick, enabling user-assisted remote attackers to crash or possibly leak information via crafted images with large/negative values. Con...

CVE-2009-0590

OpenSSL vulnerability CVE-2009-0590 affects the ASN1_STRING_print_ex path for BMPString/UniversalString lengths, enabling a remote attacker to trigger invalid memory access and crash the application (DoS). The issue is present in OpenSSL builds prior to 0.9.8k. Public advisories and security bull...

CVE-2009-1072

CVE-2009-1072 affects the Linux kernel prior to 2.6.28.9. nfsd in the kernel does not drop the CAP_MKNOD capability before handling a user request in a thread, enabling local users on an exported filesystem using root_squash to create device nodes. MiracleLinux 3 lists this as fixed in kernel-2.6...

CVE-2010-4164

CVE-2010-4164 affects the Linux kernel prior to 2.6.36.2, where multiple integer underflows occur in the x25_parse_facilities function (net/x25/x25_facilities.c). This can allow a remote attacker to cause a denial of service (system crash) via malformed X.25 facility data (X25_FAC_CLASS_A/B/C/D)....

CVE-2013-0773

CVE-2013-0773 corresponds to a vulnerability in the Chrome Object Wrapper (COW) and System Only Wrapper (SOW) security wrappers in Mozilla-based products. The issue allowed modifications to a prototype, enabling a non-specified remote site to access chrome objects or potentially execute JavaScrip...

CVE-2013-0900

CVE-2013-0900 describes a race-condition vulnerability in the ICU library used by Google Chrome (and other ICU-dependent software). The issue could allow a remote attacker to cause a denial of service or potentially other impact via crafted ICU data, with remediation provided by upgrading ICU to ...

CVE-2014-2398

CVE-2014-2398 concerns an unspecified Javadoc-related vulnerability in Oracle Java SE (affecting 5.0u61, 6u71, 7u51, 8; JavaFX 2.2.51; JRockit R27.8.1/R28.3.1) with no confidentiality impact, partial integrity impact, and no availability impact (CVSS 3.5). IBM security bulletins note impact acros...

CVE-2015-2740

CVE-2015-2740 affects Mozilla Firefox (and Thunderbird) with a buffer overflow in nsXMLHttpRequest::AppendToResponseText, allowing remote denial of service or other impact. Affected: Firefox before 39.0; Firefox ESR 31.x before 31.8 and 38.x before 38.1. Remediation: upgrade to Firefox 39.0+ (and...

CVE-2015-4551

CVE-2015-4551: LibreOffice (before 4.4.5) and Apache OpenOffice (before 4.1.2) may disclose local-file data via crafted documents by processing LinkUpdateMode configuration data stored in OpenDocument Format templates/files. Connected sources confirm the affected versions and the root cause in Op...

CVE-2015-4895

CVE-2015-4895 is an unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier that could allow remote authenticated users to affect availability through unknown vectors related to InnoDB. Public documentation in the connected advisories confirms the CVE is listed among multiple MySQL/Ma...

CVE-2015-8567

CVE-2015-8567 describes a memory leak in the QEMU vmxnet3 device emulator (net/vmxnet3.c) that could allow a remote attacker to cause a denial of service via memory exhaustion. The vulnerability is part of multiple CVEs in QEMU; Debian security advisories report fixes in stable Jessie to version ...