CVE-2017-12902

CVE-2017-12902 affects tcpdump (Zephyr parser) up to version 4.9.2. The vulnerability is a buffer over-read in print-zephyr.c that could lead to information exposure or a crash. Affected product: tcpdump (Zephyr parser) before 4.9.2. Root cause: buffer over-read in Zephyr parser. Impact (as per s...

CVE-2017-17863

CVE-2017-17863 affects the Linux kernel 4.9.x up to 4.9.71, where the BPF verifier in kernel/bpf/verifier.c fails to check the relationship between pointer values and the BPF stack. This can allow local users to trigger a denial of service (integer overflow or invalid memory access) or potentiall...

CVE-2017-17997

Wireshark vulnerability CVE-2017-17997 affects the MRDISC dissector prior to version 2.2.12, where a NULL pointer dereference could crash the dissector when parsing IPv4 addresses. The issue was fixed by adding validation of an IPv4 address in epan/dissectors/packet-mrdisc.c. Public references in...

CVE-2017-5667

CVE-2017-5667 affects QEMU’s SDHCI emulation: the sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c can cause an out-of-bounds heap access during multi-block data transfers, enabling a local privileged guest to crash the QEMU host or potentially execute arbitrary code. The description an...

CVE-2017-8363

CVE-2017-8363 affects libsndfile 1.0.28, where the flac_buffer_copy function (flac.c) is vulnerable to a heap-based out-of-bounds read via a crafted audio file, causing denial of service. Documented in multiple advisories; impact is a crash/DoS. Affected packages include libsndfile and various OS...

CVE-2018-10887

Affects libgit2 (the Git library); vulnerable component is delta_apply.c (git_delta_apply) where an unexpected sign extension can cause an integer overflow leading to an out-of-bounds read. Impact: read before the base object and potential DoS; attacker could leak memory addresses. Affected versi...

CVE-2018-15501

The CVE-2018-15501 issue exists in libgit2’s ng_pkt handling (transports/smart_pkt.c). A remote attacker can send a crafted smart-protocol packet (“ng”) that lacks a '\0' byte, triggering an out-of-bounds read and DoS. Affected versions are libgit2 before 0.26.6 and 0.27.x before 0.27.4. Remediat...

CVE-2018-16067

CVE-2018-16067 describes a use-after-free in WebAudio in Google Chrome/Chromium prior to 69.0.3497.81, enabling a remote attacker to potentially cause heap corruption via a crafted HTML page. Connected sources document remediation via upgrading to Chromium/Chrome version 69.0.3497.81 or newer (e....

CVE-2018-17473

CVE-2018-17473 is a URL spoofing vulnerability in Google Chrome/Chromium’s Omnibox prior to version 70.0.3538.67. The fixed release is 70.0.3538.67 (upstream) and Debian/Arch advisories document the remediation to update to 70.0.3538.67 or newer. Affected component is the Omnibox; root cause rela...

CVE-2018-6046

CVE-2018-6046 refers to an issue in Chromium/Google Chrome DevTools where insufficient data validation allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension. The vulnerability is described in multiple sources (e.g., Debian DSA-4103, RHSA-2018:0265) as...

CVE-2018-6061

CVE-2018-6061: A race condition in Google's Chrome/Chromium WebAssembly/V8 stack (SharedArrayBuffers) could allow a remote attacker to trigger heap corruption via a crafted HTML page. Affected product: Google Chrome (65.x), fixed in Chrome 65.0.3325.146 (and related Chromium releases). Remediatio...

CVE-2018-6075

Chrome 65.0.3325.146+ fixes CVE-2018-6075 (information disclosure via overly permissive cross-origin downloads). Affected product: Google Chrome/Chromium. Root cause: bypass of Same Origin Policy enabling cross-origin data leakage through a crafted HTML page and user interaction. Remediation: upg...

CVE-2018-6114

CVE-2018-6114: A vulnerability in Chromium/Blink allowed bypass of Content Security Policy via CSP enforcement failure for tags. Affected products include Google Chrome and Chromium (Blink engine). Root cause is CSP bypass in the rendering pipeline, enabling remote HTML crafted pages to bypass C...

CVE-2018-6165

CVE-2018-6165 affects Google Chrome/Chromium: URL spoofing in the Omnibox due to incorrect handling of reloads in Navigation prior to 68.0.3440.75. The issue is described as a URL spoof vulnerability in the Omnibox and has been addressed in Chrome/Chromium updates (e.g., 68.0.3440.75/68.x). Publi...

CVE-2020-6061

CVE-2020-6061 affects coturn (CoTURN) web server: a crafted HTTP POST request can trigger a heap out-of-bounds read in the server when parsing POST data, leading to information leaks and misbehavior. The vulnerability is associated with CoTURN 4.5.1.1 and was fixed in updated package releases acr...

CVE-2021-38014

CVE-2021-38014 describes an out-of-bounds write in the SwiftShader component of the Chromium/Google Chrome browser before version 96.0.4664.45. The vulnerability can enable a remote attacker to potentially trigger heap corruption via a crafted HTML page, leading to arbitrary code execution or bro...

CVE-2021-42532

Multiple connected sources confirm CVE-2021-42532 affects Exempi (XMP Toolkit SDK) with a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a crafted file). Public details cite affected versions (...

CVE-2023-2856

Wireshark vulnerability CVE-2023-2856: VMS TCPIPtrace file parser crash can cause denial of service. Affects Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13 via crafted capture files; exploitation may crash the application. Remediation seen in connected advisories: upgrade to newer Wireshark versions (e.g...

CVE-2023-51781

CVE-2023-51781 affects the Linux kernel up to version before 6.6.8, with a use-after-free in atalk_ioctl (net/appletalk/ddp.c) caused by a race in atalk_recvmsg. The issue is locally exploitable and has a high impact on confidentiality/integity/availability per CVSS. A patch is available in kerne...

CVE-2024-26751

CVE-2024-26751 affects the Linux kernel on ARM (ep93xx) where the gpiod_lookup_table lacks a terminator. If gpio_find() is passed a con_id not present in the table, it may loop indefinitely and trigger an oops. The available connected documents confirm the issue and describe the fix as adding a t...

CVE-2024-26790

The CVE-2024-26790 issue affects the Linux kernel, specifically the dmaengine: fsl-qdma path. It describes a vulnerability where 16-byte unaligned read transactions by QDMA on ls1028a-based SoCs can stall the Network On-Chip (NOC) and trigger PCIe controller timeouts, potentially causing a deadlo...

CVE-2024-26917

CVE-2024-26917 affects the Linux kernel SCSI/FCoE path. The vulnerability stems from reverting a commit that changed spin lock usage for FCoE devices (from bh to irqsave), which caused interrupts to be lost for FCoE devices. The problem was introduced in the patch set around scsi: fcoe: Fix poten...

CVE-2024-35902

The CVE-2024-35902 issue affects the Linux kernel’s RDS path. In net/rds, a null cp can be dereferenced in __rds_rdma_map when cp->cp_conn is accessed, potentially causing a crash. Analysis notes that cp is a parameter that may be NULL at several call sites (e.g., rds_get_mr, rds_get_mr_for_de...

CVE-2024-35922

The CVE-2024-35922 issue is a Linux kernel vulnerability in fbmon/fb_videomode_from_videomode() where htotal * vtotal can overflow to zero, risking division by zero. The root cause is overflow during videomode computation; the fix mirrors fb_var_to_videomode() by preventing division by zero. Affe...

CVE-2025-22040

CVE-2025-22040 affects the Linux kernel ksmbd multichannel path. A race between session setup and ksmbd_sessions_deregister can free a session before its connection is added to the session’s channel list. The fix adds a reference-count check before freeing the session. Documented impact is high (...

CVE-2025-37968

CVE-2025-37968 (Linux kernel) affects the iio: light: opt3001 driver. The issue is a deadlock in a threaded IRQ path caused by reading the same flag twice (once for mutex_lock, once for mutex_unlock). The fix standardizes the flag handling by reading it into a local variable and reusing that valu...

CVE-2025-37982

CVE-2025-37982 affects the Linux kernel wifi driver wl1251 (wl1251_tx_work path). The vulnerability is a memory leak: when wl1251_ps_elp_wakeup fails with -ETIMEDOUT, the skb dequeued from tx_queue is lost. The advisory/connected Azure Nessus entry confirms the fix: the skb must be re-queued back...

CVE-2007-4772

CVE-2007-4772 concerns the Tcl (Tool Command Language) regular expression parser. The affected code path is TCL before 8.4.17, which, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of servic...

CVE-2012-3150

CVE-2012-3150 is an unspecified vulnerability in the MySQL Server component (Oracle MySQL 5.1.64 and earlier; 5.5.26 and earlier) that allows remote authenticated users to affect availability via unknown vectors related to the Server Optimizer. Impact is described as partial availability degradat...

CVE-2015-0797

CVE-2015-0797 affects GStreamer up to 1.4.4 (GStreamer 1.4.x) when used by Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux. The flaw is a buffer over-read in H.264 video data processing in the GStreamer pipeline (m4v files) that can cause a denial o...

CVE-2015-1271

CVE-2015-1271 is a confirmed vulnerability in Chromium’s pdfium component, described as a heap-buffer-overflow in pdfium associated with large memory allocations triggered by crafted PDFs. Public references in the connected documents indicate the issue was fixed in Chrome 44.0.2403.89 (stable cha...

CVE-2015-2775

CVE-2015-2775 is a directory traversal vulnerability in GNU Mailman up to version 2.1.19, exploitable via a leading .. in a list name when not using a static alias. The underlying issue is improper validation of list-name input, enabling remote attackers to execute arbitrary files. Impact is remo...

CVE-2015-3258

CVE-2015-3258 affects cups-filters' texttopdf component (filter/texttopdf.c). Root cause: a heap-based buffer overflow in WriteProlog when processing a print job with a small line size, allowing a remote attacker to crash texttopdf or possibly execute arbitrary code. Affected product: cups-filter...

CVE-2016-0606

CVE-2016-0606 is an unspecified vulnerability in Oracle MySQL Server and MariaDB related to encryption that can be exploited by remote authenticated users to affect integrity. Affected versions include MySQL 5.5.46 and earlier, 5.6.27 and earlier, 5.7.9 and MariaDB before 5.5.47; also 10.0.x befo...

CVE-2016-4000

CVE-2016-4000 affects Oracle Enterprise Manager Base Platform (Jython) — a remote code execution via a crafted serialized PyFunction object. The GitHub advisory GHSA-6R7R-JJ8H-PQ6V corroborates deserialization of untrusted data in Jython and references the same CVE. Tenable Nessus entries (e.g., ...

CVE-2016-6128

CVE-2016-6128 affects the GD Graphics Library (libgd), specifically the gdImageCropThreshold function in gd_crop.c, with vulnerable pre-2.2.3 releases used by PHP prior to 7.0.9. Exploitation can cause an application crash (denial of service) via an invalid color index. Public advisories and vend...

CVE-2017-13065

CVE-2017-13065 affects GraphicsMagick 1.3.26, with a NULL pointer dereference in SVGStartElement (coders/svg.c). The description explicitly identifies the vulnerable function and file. The vulnerability’s practical impact is not extensively detailed in the provided documents beyond the NULL deref...

CVE-2017-14504

CVE-2017-14504 affects GraphicsMagick and is caused by ReadPNMImage in coders/pnm.c not validating color count for the XV 332 format, leading to a NULL pointer dereference. The vulnerability is associated with GraphicsMagick 1.3.26 and can impact availability (partial to high depending on context...

CVE-2017-3463

CVE-2017-3463 is a vulnerability in the MySQL Server component of Oracle MySQL (Server: Security: Privileges). The MiracleLinux advisories indicate affected MySQL Server instances include 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue allows a highly privileged attacker...

CVE-2017-7750

CVE-2017-7750 describes a use-after-free in video control operations when a element holds a reference to an older window that has been replaced in the DOM, leading to a potentially exploitable crash. Affected products and versions from the connected records include Mozilla Firefox < 54, Firef...

CVE-2017-8361

The CVE-2017-8361 issue affects libsndfile 1.0.28 and is caused by a flaw in the flac_buffer_copy function (flac.c), enabling a crafted audio file to trigger a denial of service via a buffer overflow. The vulnerability is exploitable remotely and could crash the application; some reports mention ...

CVE-2017-8379

CVE-2017-8379 is a memory-leak issue in QEMU keyboard input event handling that can allow a local privileged guest user to exhaust host memory and cause a denial of service. The vulnerability is listed among fixes in Red Hat RHSA-2017:2408, which notes remediation by rebasing to QEMU 2.9.0 and re...

CVE-2018-1002200

CVE-2018-1002200 affects plexus-archiver prior to 3.6.0, which is vulnerable to a directory traversal (Zip-Slip) that allows an attacker extracting a crafted archive to write to arbitrary files. Impact observed in multiple advisories: arbitrary file write/overwrite by exploiting zip entry path tr...

CVE-2018-20360

FAAD2 (libfaad) vulnerability CVE-2018-20360 arises from an invalid memory address dereference in sbr_process_channel (libfaad/sbr_dec.c), on FAAD2 2.8.8, causing segmentation fault and denial of service. Connected advisories confirm this issue among multiple FAAD2 CVEs and document patches acros...

CVE-2018-5268

CVE-2018-5268 - OpenCV 3.3.1 risk detail : OpenCV 3.3.1 contains a heap-based buffer overflow in cv::Jpeg2KDecoder::readComponent8u, triggered when parsing a crafted image file in modules/imgcodecs/src/grfmt_jpeg2000.cpp. The vulnerability stems from parsing JPEG 2000 data and may lead to memory ...

CVE-2018-5335

Wireshark CVE-2018-5335 affects the WCP dissector. Vulnerable in Wireshark 2.4.0–2.4.3 and 2.2.0–2.2.11; the crash was caused by insufficient buffer length validation in epan/dissectors/packet-wcp.c. The issue has been fixed by adding proper buffer-length validation. Remediation is to upgrade to ...

CVE-2018-5336

The CVE-2018-5336 issue affects Wireshark, specifically versions 2.4.0–2.4.3 and 2.2.0–2.2.11. The JSON, XML, NTP, XMPP, and GDB dissectors could crash due to excessive recursion. The vulnerability was fixed by limiting recursion in epan/tvbparse.c. No exploits are documented in the provided sour...

CVE-2018-6110

CVE-2018-6110 affects Google Chrome/Chromium where the Downloads component wrongly parses documents as HTML during processing, allowing a remote attacker to cause script execution via a local non-HTML page. Public sources in the connected set confirm affected product families (Chromium/Chrome) an...

CVE-2018-6163

CVE-2018-6163 is a URL spoofing vulnerability in Google Chrome’s Omnibox caused by incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to trick users with IDN homographs. Affected product/version: Google Chrome (Omnibox) prior to 68.0.3440.75. Impact: doma...

CVE-2018-7337

CVE-2018-7337 affects Wireshark 2.4.0–2.4.4, where the DOCSIS protocol dissector could crash. The root cause was a recursive algorithm used for concatenated PDUs in plugins/docsis/packet-docsis.c. The issue was addressed by removing that recursive approach, mitigating the crash vector. Connected ...