CVE-2020-20445

Summary of the CVE-2020-20445 family (FFmpeg 4.2): FFmpeg 4.2 is affected by a Divide By Zero in various code paths (notably libavcodec/lpc.h) that can cause a Denial of Service when processing crafted input. The connected advisories corroborate multiple CVEs tied to FFmpeg 4.2 (e.g., CVE-2020-20...

CVE-2020-6079

libmicrodns 0.1.0 contains multiple CVEs including CVE-2020-6079, a denial-of-service in resource allocation during mDNS parsing where allocated data may not be freed. An attacker can trigger this by sending repeated mDNS messages; overall impact includes potential service disruption. Upstream fi...

CVE-2021-32274

FAAD2 (faad2) versions up to 2.10.0 are affected by a heap-buffer-overflow in sbr_qmf_synthesis_64 (sbr_qmf.c), enabling potential code execution. This CVE (CVE-2021-32274) is referenced in multiple advisories (Debian/Ubuntu/DLA/DLA-2792, USN 6313-1) indicating a patch is available in newer faad2...

CVE-2021-38004

CVE-2021-38004 affects Chromium-based Google Chrome Autofill: insufficient policy enforcement allows a remote attacker to leak cross-origin data via a crafted HTML page, prior to version 95.0.4638.69. Affected component: Autofill in Chromium/Chrome; root cause is policy enforcement gaps. Impact: ...

CVE-2021-4063

CVE-2021-4063 is a Use-After-Free vulnerability in the Chromium browser engine’s Developer Tools before version 96.0.4664.93. The issue, described across multiple trusted sources, can allow a remote attacker to potentially cause heap corruption via a crafted HTML page, with impact including arbit...

CVE-2022-1923

CVE-2022-1923 affects the GStreamer gst-plugins-good1.0 demuxer for MKV files using bz2 decompression. The issue is a heap overwrite/segfault caused by an integer overflow in the matroskademux element when processing bzip decompression, with impact depending on the libc and OS (heap overwrite pos...

CVE-2022-28202

CVE-2022-28202 affects MediaWiki pre-1.35.6, 1.36.x pre-1.36.4, and 1.37.x pre-1.37.2. The issue is an XSS in which the widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or in Special:RevisionDelete. Public disclosures in multiple advisories co...

CVE-2022-3341

FFmpeg (libavformat/nutdec.c) contains a null pointer dereference in decode_main_header() caused by not checking the return value of avformat_new_stream(). This can lead to application crashes (availability impact). The issue is confirmed across multiple sources (Debian/DLA advisory, Mageia advis...

CVE-2022-39176

CVE-2022-39176 affects BlueZ before 5.59. The underlying flaw is that profiles/audio/avrcp.c does not validate params_len, enabling physically proximate attackers to obtain sensitive information. Documented across multiple sources (Astra Linux advisory, Debian DLA-3879, Red Hat/Nessus plugs) conf...

CVE-2024-26795

CVE-2024-26795 concerns a Linux kernel riscv issue where the Sparse-Memory/vmemmap was out-of-bounds due to misoffsetting of vmemmap. The fix maps the first page of vmemmap to the first page of physical memory to ensure vmemmap bounds are respected during pfn_to_page() and page_to_pfn() operation...

CVE-2024-27412

Technical details about CVE-2024-27412 (affected product, root cause, impact, fix) are not provided in the connected documents; public details are limited to the CVE description in the initial document.

CVE-2024-35935

CVE-2024-35935 – Linux kernel (btrfs: send: handle path ref underflow in header iterate_inode_ref()) Connected documents confirm a concrete fix in the Linux kernel: when building a path buffer for iterate_inode_ref(), a BUG_ON-based path underflow handling was replaced with proper error handling ...

CVE-2024-35936

CVE-2024-35936. In the Linux kernel, the btrfs relocation code (btrfs_relocate_sys_chunks) contains an unhandled corruption case in its chunk-tree lookup loop. The issue arises from two theoretically impossible conditions: (1) an inexact search yields a key with offset -1 for a chunk-tree item, a...

CVE-2025-37775

CVE-2025-37775 affects the Linux kernel in the ksmbd component. The issue centers on a warning in __kernel_write_iter that could relate to directory write attempts; the patch stabilizes behavior by not allowing writes to directories, as described in the initial advisory. The vulnerability is addr...

CVE-2025-37967

CVE-2025-37967 affects the Linux kernel USB Type-C UCSI driver (displayport) and fixes a deadlock when handling DP Alt Mode. The patch adds ucsi_con_mutex_lock and ucsi_con_mutex_unlock so the connector mutex is only acquired when a connection exists and the partner pointer is valid, preventing a...

CVE-2008-2108

CVE-2008-2108 affects PHP 4.x prior to 4.4.8 and PHP 5.x prior to 5.2.5 on 64-bit systems. The GENERATE_SEED macro’s precision loss during 64-bit multiplication yields only 24 bits of entropy, making brute‑force attacks against protections using rand/mt_rand easier. The issue is fixed in the adve...

CVE-2015-5299

CVE-2015-5299 affects Samba’s VFS shadow_copy2: shadow_copy2_get_shadow_copy_data does not verify DIRECTORY_LIST rights, allowing remote attackers to access snapshots via a shadow copy directory. Affected: Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, 4.3.x before 4.3.3. Impact: potential ...

CVE-2016-8669

CVE-2016-8669 affects QEMU: the serial_update_parameters function in hw/char/serial.c can be triggered by a divider value greater than baud base to cause a divide-by-zero and QEMU process crash. It is a local privilege vulnerability (guest to host) with denial of service as the impact. The connec...

CVE-2016-9106

CVE-2016-9106 is a memory leak in v9fs_write (hw/9pfs/9p.c) of QEMU. A local guest administrator can cause DoS by exhausting memory. The IBM PowerKVM bulletin notes fixes for PowerKVM 2.1/3.1 via PowerKVM 3.1.0.2; other public advisories reference the vulnerability as part of broader QEMU issues ...

CVE-2017-12376

ClamAV versions up to 0.99.2 contain a PDF handling vulnerability (handle_pdfname buffer overflow in pdf.c) that could allow DoS or remote code execution after processing a crafted PDF. Multiple advisories and upstream notices confirm CVE-2017-12376 and correlated fixes; the upstream upgrade to 0...

CVE-2017-12380

CVE-2017-12380 affects ClamAV versions 0.99.2 and earlier. The root cause is improper input validation in mbox.c during certain mail parsing functions, allowing an unauthenticated remote attacker to send a crafted email that triggers a NULL pointer dereference and causes a DoS. The issue is remed...

CVE-2017-12605

OpenCV Open Source Computer Vision Library (up to 3.3) contains an out-of-bounds write in FillColorRow8 (utils.cpp) when reading images via cv::imread, as identified in CVE-2017-12605. Connected sources confirm the affected component and function, and multiple advisories surface the risk across d...

CVE-2017-13737

GraphicsMagick 1.3.26 contains an invalid free in MagickFree (memory.c), leading to a remote denial of service. The description indicates the vulnerability is in the GraphicsMagick package, but the provided documents do not specify a patched version or concrete remediation steps. There are no exp...

CVE-2017-13748

CVE-2017-13748 : JasPer 2.0.12 contains memory leaks triggered by jas_strdup() in base/jas_string.c, leading to remote denial of service. The initial description and connected feeds identify this as the primary CVE, with various Nessus/OpenVAS records listing many JasPer-related issues (often mul...

CVE-2017-2295

CVE-2017-2295 affects Puppet prior to 4.10.1, where deserializing data off the wire could be forced into an attacker-controlled format, enabling remote code execution. The underlying issue is unsafe YAML deserialization; the fix constrains on-wire data formats to PSON or safely decoded YAML (and ...

CVE-2017-3652

CVE-2017-3652 is a vulnerability in the Oracle MySQL Server component (subcomponent: Server: DDL). Affected release ranges include MySQL 5.5.56 and earlier, 5.6.36 and earlier, and 5.7.18 and earlier. The issue can be exploited by a low-privilege, network-based attacker via multiple protocols to ...

CVE-2018-5345

CVE-2018-5345 describes a stack-based buffer overflow in GNOME gcab up to version 0.7.4, exploitable via malformed .cab files to crash or potentially execute arbitrary code. Connected advisories document that fixes were released in various distributions (e.g., gcab updates in Fedora 26 and Red Ha...

CVE-2018-5381

The vulnerability CVE-2018-5381 affects the Quagga BGP daemon (bgpd) prior to 1.2.3. It stems from a bug in parsing the BGP OPEN Capabilities in bgp_packet.c:bgp_capability_msg_parse. When a Multi-Protocol capability lacks a recognized AFI/SAFI, the parser can enter an infinite loop, causing a de...

CVE-2018-6045

CVE-2018-6045 affects Google Chrome (DevTools) and is caused by Insufficient policy enforcement in DevTools from extensions, allowing a remote attacker to potentially leak user local file data via a crafted Chrome extension. The vulnerability is tied to Chrome versions prior to 64.0.3282.119. Pub...

CVE-2018-6048

CVE-2018-6048 is a Chrome Blink vulnerability where insufficient enforcement of the referrer policy allowed leakage of referrer information via a crafted HTML page. Affected product: Google Chrome (Blink component). Root cause: bypass of the referrer policy in Blink leading to potential informati...

CVE-2018-6053

CVE-2018-6053 is an information-leak vulnerability in Google Chrome’s New Tab Page caused by an inappropriate implementation. In affected versions prior to 64.0.3282.119, a local attacker could view website thumbnail images after clearing browser data by presenting a crafted HTML page. The issue ...

CVE-2018-6103

CVE-2018-6103 is a Chrome/Chromium UI spoofing vulnerability in the Permissions prompt, where an attacker could bypass permission policy via a crafted HTML page. Connected sources identify the issue as a permissions UI spoof in Chrome/Chromium and note remediation via upgrading to Chrome 66.0.335...

CVE-2018-6175

CVE-2018-6175 concerns Google Chrome URL handling: an incorrect handling of confusable characters in the Omnibox/URL Formatter allows domain spoofing via IDN homographs in Chrome versions before 68.0.3440.75. Public sources (Debian/DLA entries) indicate this vulnerability was addressed by upgradi...

CVE-2018-7284

CVE-2018-7284 affects Asterisk and Certified Asterisk; during SUBSCRIBE, res_pjsip_pubsub does not cap Accept headers (limit 32) and can write outside memory, causing a crash. Affected: 13.x–15.x releases (precise bounds in sources). Exploitation details exist (Exploit-DB), with vendor advisories...

CVE-2019-13484

Xymon ≤ 4.3.28 contains a buffer overflow in the status-log viewer CGI caused by expansion in appfeed.c. This CVE-2019-13484 entry is documented across multiple sources (NVD, OSV, Debian/Ubuntu trackers, Nessus/NASL plugins, etc.), consistently stating the flaw exists in the status-log viewer com...

CVE-2019-13485

CVE-2019-13485 affects Xymon up to version 4.3.28. The history viewer component (history.c) is vulnerable to a stack-based buffer overflow triggered by a long hostname or service parameter. The vulnerability is documented with a high/critical impact profile (CVSS v3 base score 9.8, network access...

CVE-2019-15531

GNU Libextractor up to version 1.9 is affected by a heap-based buffer over-read in the DVI extractor (EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c). This could enable reading beyond allocated buffers. Public advisories (Debian DLA-2851-1, Mageia MGASA-2020-0015, OpenVAS/Nessus entries,...

CVE-2019-16910

Arm Mbed TLS prior to 2.19.0 and Arm Mbed Crypto prior to 2.0.0 are affected by CVE-2019-16910. When deterministic ECDSA is enabled, the RNG blinding uses insufficient entropy, enabling a side-channel based attack that could recover a private key if the same message is signed repeatedly. The issu...

CVE-2019-1999

CVE-2019-1999 is evidenced in connected Nessus advisories for Unity Linux kernel updates (UTSA-2026-003839/004335/000386). The issue is in binder_alloc_free_page in binder_alloc.c, causing a possible double free due to improper locking. This can lead to local escalation of privilege in the kernel...

CVE-2020-8002

The CVE-2020-8002 entry concerns virglrenderer’s vrend_renderer.c: a NULL pointer dereference in versions up to 0.8.1 can allow a denial of service when a grid is launched without a Compute Shader. The issue is repeatedly reported across connected advisories (Debian DLA/Debian LTS, Alpine Linux, ...

CVE-2021-21366

CVE-2021-21366 - xmldom : The vulnerability arises from xmldom’s handling of XML when repeatedly parsing and serializing malicious documents, due to improper preservation of system identifiers, FPIs, and namespaces. This can cause unexpected syntactic changes in downstream applications. The issue...

CVE-2021-31872

CVE-2021-31872 affects klibc prior to version 2.0.9, where multiple integer overflows in the cpio command on 32-bit systems may cause a buffer overflow or other security impact. The issue is documented across multiple advisories (Astra Linux, Debian DLA-2695-1, Ubuntu USN-5379-1, Alpine security ...

CVE-2021-32276

CVE-2021-32276 concerns Faad2 up to version 2.10.0. Affected component: libfaad, specifically the function get_sample() in output.c. Root cause: NULL pointer dereference, which can be triggered to cause Denial of Service. Documented impact is partial availability degradation via DoS. Exploitation...

CVE-2021-32921

CVE-2021-32921 affects Prosody before 0.11.9. When running under Lua 5.2 or later, it does not use a constant-time algorithm for comparing certain secret strings, which can enable a timing attack to reveal secret data. Public advisories and Debian/Arch/Gentoo listings corroborate this as part of ...

CVE-2022-23493

CVE-2022-23493 affects xrdp prior to v0.9.21. It is an Out-of-Bounds Read in xrdp_mm_trans_process_drdynvc_channel_close(). There are no known workarounds in the provided docs; upgrade to a fixed release is advised. Connected advisories note this is among multiple fixes for xrdp and list related ...

CVE-2022-2787

CVE-2022-2787 affects schroot prior to 1.6.13, where overly permissive rules for chroot or session names can lead to a denial of service by manipulating internal state when a schroot session is started. The NVD entries list a CVSS v3.1 base score around 4.3 (Medium), with impact limited to availa...

CVE-2022-30287

CVE-2022-30287 affects Horde Groupware Webmail Edition up to 5.2.22, enabling a reflection injection that allows arbitrary deserialization of PHP objects via a driver-class instantiation. Debian advisories note fixes in php-horde-turba: 4.2.25-5+deb11u2 for Debian 11 (and related LTS advisories f...

CVE-2022-31091

CVE-2022-31091 affects the Guzzle HTTP client. When following redirects that change port (or scheme/host), the request may inappropriately retain sensitive headers (Authorization, Cookie). The issue is that a redirect to a URI with a different port previously did not trigger header removal for sc...

CVE-2023-39350

CVE-2023-39350 relates to FreeRDP (RDP client) and describes an integer underflow that can lead to a Denial of Service. The issue occurs when an insufficient blockLen is provided and length validation is not properly performed, triggering a DOS via conditions like an assert with default compilati...

CVE-2023-46849

CVE-2023-46849 affects OpenVPN 2.6.0–2.6.6, where a divide-by-zero can crash the app and cause denial of service. CVE-2023-46850 is a use-after-free in OpenVPN 2.6.0–2.6.6, potentially leaking memory or enabling remote execution when sending network buffers to a remote peer. Public advisories con...