CVE-2018-7557

CVE-2018-7557 affects FFmpeg (libavcodec/utvideodec.c: decode_init) in FFmpeg versions 2.8 through 3.4.2. A crafted AVI file with specific chroma subsampling dimensions can trigger a denial of service via an out-of-bounds/out-of-array read. Connected sources confirm the component and root cause b...

CVE-2019-20373

CVE-2019-20373 affects LTSP’s Display Manager (ldm) up to version 2.18.06. A local attacker can gain root by exploiting an empty LDM_USERNAME when a user’s shell lacks Bourne shell syntax support, via the run-x-session script. The issue is a local privilege escalation in LTSP LDM. Affected deploy...

CVE-2019-6956

FAAD2 2.8.8 contains CVE-2019-6956: a buffer over-read in ps_mix_phase (libfaad/ps_dec.c). Public advisories (Debian, Gentoo GLSA) link this to potential denial of service and related impacts; Debian notes several FAAD2 CVEs in older releases. The issues are fixed in later FAAD2 releases (Gentoo ...

CVE-2019-8383

AdvanceCOMP vulnerability CVE-2019-8383: an invalid memory address in adv_png_unfilter_8 (lib/png.c) can be triggered by a crafted file, allowing a Denial of Service (segmentation fault) or unspecified impact when opened. Public advisories (Debian, Mageia, Red Hat/CentOS, Fedora) document this is...

CVE-2020-12460

OpenDMARC (affected: 1.3.2 and 1.4.x up to 1.4.0-Beta1) is vulnerable to an improper null termination in opendmarc_xml_parse, causing a one-byte heap overflow and remote memory corruption when parsing crafted DMARC aggregate reports. Affected components/file: opendmarc_xml_parse in OpenDMARC. Roo...

CVE-2021-20302

CVE-2021-20302 affects OpenEXR, specifically the TiledInputFile component. A crafted single-part non-image can be processed by OpenEXR, triggering a floating-point exception and impacting availability. The connected Debian LTS advisory (DLA-3236-1) states this is fixed in OpenEXR version 2.2.1-4....

CVE-2021-21375

CVE-2021-21375 affects the pjproject/PJSIP library (versions 2.10 and earlier). The issue arises after an initial INVITE when two 183 responses are received and the first triggers negotiation failure, causing a crash and a denial of service. Mitigation: upgrade to patched pjproject/PJSIP (per GLS...

CVE-2021-26933

CVE-2021-26933 affects the Xen hypervisor (Xen 4.9–4.14.x) on ARM: a guest can influence cache-bypass behavior, and cache-cleaning may occur before scrub verification, so there is no guarantee that all writes have reached memory before handing the page to the guest. The practical consequence is p...

CVE-2021-30155

Mode C: CVE-2021-30155 affects MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Root cause: ContentModelChange does not verify permissions when creating/setting the content model on a nonexistent page. Impact: could allow a user to manipulate content model beyond their permission...

CVE-2021-32436

CVE-2021-32436 is an out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11, enabling remote Denial of Service via unspecified vectors. The issue is cited across multiple vendor advisories (Debian DLA-2983, OpenSUSE, Mageia, Fedora, Ubuntu/Nessus plugins), all associating ...

CVE-2021-3407

CVE-2021-3407 affects MuPDF: in version 1.18.0, a double-free during linearization can cause memory corruption and other potential consequences. The issue is documented across multiple sources (e.g., Gentoo GLSA 202105-30, Debian LTS DLA-2589-1) indicating memory safety risk and the need to upgra...

CVE-2021-44025

Roundcube webmail vulnerability CVE-2021-44025 (XSS) and CVE-2021-44026 (SQL injection) affect Roundcube before 1.3.17 and 1.4.x before 1.4.12. The XSS is triggered by handling an attachment filename extension in a MIME type warning message; the SQLi affects search/search_params handling. Publicl...

CVE-2022-1924

CVE-2022-1924 describes a DOS/heap-overwrite risk in the gstreamer good plugins’ MKV demuxer when using LZO decompression. The root cause is an integer overflow in the matroskademux element’s LZO decompression path, which can lead to a segfault or a heap overwrite depending on the libc/OS behavio...

CVE-2022-32166

Open vSwitch (Openvswitch) is affected by CVE-2022-32166 for versions v0.90.0 through v2.5.0, due to a heap/buffer over-read in flow.c caused by an unsafe minimasks comparison. The vulnerability can crash the software, enable memory modification, and may allow remote execution. Public documents i...

CVE-2022-46391

AWStats 7.x–7.8 is vulnerable to XSS in the hostinfo plugin due to improper handling of Net::XWhois output. The CVE-2022-46391 issue is acknowledged across multiple feeds; advisories note a security fix is available in various distributions (e.g., Debian 10 with 7.6+dfsg-2+deb10u2, Fedora 37/36 u...

CVE-2023-52616

CVE-2023-52616 affects the Linux kernel crypto/mpi code path: mpi_ec_init may fail to clear all fields in the mpi_ec_ctx on initialization, leading to a crash when the structure is released and a field is referenced later (notably when Za is computed for SM2). The issue is caused by fields not be...

CVE-2024-26747

CVE-2024-26747 : Linux kernel patch fixes a NULL pointer dereference in usb: roles. The usb_role_switch driver saves the parent module reference; if the parent device is removed before the usb_role_switch device is released, dereferencing the now-NULL module pointer causes a crash. The fix stores...

CVE-2024-35940

CVE-2024-35940 affects the Linux kernel. The vulnerability stems from pstore/zone: missing NULL pointer check in psz_kmsg_read after kasprintf() can return NULL on allocation failure. The impact is a potential NULL pointer dereference in kernel code paths involving kasprintf results, with publicl...

CVE-2025-37857

CVE-2025-37857 affects the Linux kernel scsi: st driver. It fixes an array overflow in st_setup() by changing the array size from a fixed value to follow the parms size.

CVE-2025-37883

CVE-2025-37883 affects the Linux kernel in s390/sclp code. The fix adds a check for the return value of get_zeroed_page() in sclp_console_init() to prevent null pointer dereference, and introduces a free helper to address a memory leak from the loop allocation. Impact described in the sources inc...

CVE-2025-37930

CVE-2025-37930 affects Linux kernels containing the drm/nouveau fix for WARN_ON in nouveau_fence_context_kill(). The issue arises because nouveau_fence_done() can signal fences, leaving signaled fences in the pending list, and a concurrent call to nouveau_fence_context_kill() could attempt to set...

CVE-2025-37963

CVE-2025-37963 affects the Linux kernel on arm64 in the BPF subsystem. The vulnerability arises in the mitigation scope for eBPF: only cBPF programs loaded by unprivileged users are mitigated, as support for unprivileged eBPF is typically disabled and privileged users can still load the same prog...

CVE-2025-37990

CVE-2025-37990 affects the Linux kernel’s wifi/brcm80211 fmac, where brcmf_usb_dl_writeimage() did not validate the return value of brcmf_usb_dl_cmd(), leaving state.state and state.bytes uninitialized if the call failed. The fix adds error handling to jump to the error path when brcmf_usb_dl_cmd...

CVE-2025-38212

CVE-2025-38212 affects the Linux kernel IPC subsystem. The bug was a use-after-free in radix_tree_node_free triggered by idr_for_each() not being in an RCU read-critical region when called from shm_destroy_orphaned(), risking reading freed memory during radix_tree_for_each_slot(). The fix adds RC...

CVE-2025-38239

CVE-2025-38239 affects the Linux kernel megaraid_sas driver. On systems with DRAM interleave enabled, an out-of-bounds access can occur due to an invalid node index in megasas_alloc_irq_vectors during megaraid_sas probing, which triggers UBSAN reports (array-index-out-of-bounds in topology.h: ind...

CVE-2007-3387

CVE-2007-3387 affects xpdf 3.02 and thus downstream KDE/kpdf/gpdf/pdfs handling in kdegraphics, CUPS, and related tools. The root cause is an integer/stack-based overflow in PDF parsing: StreamPredictor::getNextLine may overflow when processing a crafted PDF, potentially allowing remote code exec...

CVE-2009-0834

The CVE-2009-0834 issue affects the Linux kernel up to 2.6.28.7 on x86_64, where audit_syscall_entry mishandles 32-bit processes making 64-bit syscalls or 64-bit processes making 32-bit syscalls. This can allow local users to bypass certain syscall audit configurations, and is related to CVE-2009...

CVE-2010-3689

CVE-2010-3689 affects OpenOffice.org (OpenOffice.org/OpenOffice) within the 3.x line prior to 3.3. The issue arises when soffice sets LD_LIBRARY_PATH with a zero-length directory name, enabling a local attacker to place a Trojan horse shared library in the current working directory and elevate pr...

CVE-2013-2175

HAProxy vulnerability CVE-2013-2175 affects HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19. When configured to use hdr_ip or other hdr_* functions with a negative occurrence count, a remote attacker can cause a denial of service due to negative array index usage and a crash, via an HTTP heade...

CVE-2013-4327

CVE-2013-4327 describes a Polkit race condition used when systemd communicates with a polkit authority via D-Bus, enabling local users to bypass access restrictions using a PolkitUnixProcess PolkitSubject race with (1) setuid processes or (2) pkexec. Connected advisories (GLSA-201406-27, related ...

CVE-2015-0247

CVE-2015-0247 is a heap-based buffer overflow in openfs.c of libext2fs (e2fsprogs) that allows local code execution via crafted block group descriptor data in Ext2/3/4 filesystem images. Affected: e2fsprogs/libext2fs; vulnerability due to heap overflow in open/close routines. Impact: arbitrary co...

CVE-2016-1676

CVE-2016-1676 affects Google Chrome/Chromium before 51.0.2704.63. The issue is a cross-origin bypass in extension bindings (bindings.js) caused by improper prototype handling in the extensions framework, enabling remote bypass of Same Origin Policy via unspecified vectors. Debian security advisor...

CVE-2016-7161

CVE-2016-7161 is a heap-based buffer overflow in the xlnx.xps-ethernetlite receive callback within QEMU (qemu-kvm) emulation. The vulnerability arises from improper bounds checking, enabling a remote attacker to cause a buffer overflow and execute arbitrary code on the QEMU host by sending a larg...

CVE-2016-9373

The CVE-2016-9373 issue affects Wireshark 2.2.0–2.2.1 and 2.0.0–2.0.7, where the DCERPC dissector could crash via a use-after-free triggered by network traffic or capture files. The root cause is private strings not scoped with wmem in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet...

CVE-2017-11332

CVE-2017-11332 affects SoX (Sound eXchange), specifically the startread function in wav.c of version 14.4.2. A crafted WAV file with certain conditions can cause a divide-by-zero error, leading to a denial of service (application crash). This vulnerability is documented in Debian and other adviso...

CVE-2017-12678

TagLib 1.11.1 contains a vulnerability in rebuildAggregateFrames within id3v2framefactory.cpp that can be triggered by a crafted audio file, enabling remote denial of service and potentially other impact. Affected component: TagLib, specifically the id3v2framefactory.cpp path. Root cause: pointer...

CVE-2017-15420

CVE-2017-15420 describes a URL spoofing issue in Google Chrome/Chromium’s Omnibox caused by incorrect handling of back navigations on error pages, allowing a crafted HTML page to spoof the URL bar. Affected products/versions: Chrome prior to 63.0.3239.84 (per the CVE description). Remediation: up...

CVE-2017-15722

CVE-2017-15722 affects Irssi prior to 1.0.5, where a failure to verify that a Safe channel ID is long enough can cause reads beyond the end of the string. Connected advisories confirm Irssi

CVE-2017-17085

CVE-2017-17085 affects Wireshark 2.4.0–2.4.2 and 2.2.0–2.2.10; the CIP Safety dissector could crash due to missing validation of packet length. The issue is fixed by validating the packet length in epan/dissectors/packet-cipsafety.c. Impact is a crash (denial of service) as described; remediation...

CVE-2017-5116

CVE-2017-5116 is a type-confusion vulnerability in Google Chrome/Chromium’s V8 engine. A race-condition based flaw allowed remote attackers to execute arbitrary code by enticing a user to open a crafted HTML page. Affected product family is Chromium/Chrome with V8 in the browser’s JavaScript engi...

CVE-2017-5122

CVE-2017-5122 is an out-of-bounds memory access in Google Chrome/Chromium’s V8 engine prior to 61.0.3163.100 (Windows and Chromium) that could be triggered by a crafted HTML page, enabling remote code execution. Public notices from Debian, Arch Linux, Gentoo, Fedora, and others confirm the issue ...

CVE-2017-6468

CVE-2017-6468 affects Wireshark 2.2.0–2.2.4 and 2.0.0–2.0.10, caused by a NetScaler file parser crash triggered by a malformed capture file. The root cause is in wiretap/netscaler.c where the parser previously failed to validate the relationship between pages and records, allowing a crash. The fi...

CVE-2017-7846

CVE-2017-7846 affects Mozilla Thunderbird. The issue arises in parsing RSS feeds when viewed via website or default feed format, allowing JavaScript execution from the parsed feed (feed origin mailbox://). Published mitigations indicate Thunderbird versions up to 52.5.2 are affected, with fixes i...

CVE-2017-9835

The CVE-2017-9835 entry refers to Ghostscript 9.21, where the gs_alloc_ref_array path in psi/ialloc.c can be abused via crafted PostScript due to a missing integer overflow check in base/gsalloc.c, causing a heap-based buffer overflow and application crash (remote/denial of service). The connecte...

CVE-2018-16585

Artifex Ghostscript prior to 9.24 is affected by CVE-2018-16585 where the .setdistillerkeys PostScript command is accepted despite not being intended for document processing. This leads to memory corruption, enabling remote attackers able to supply crafted PostScript to crash the interpreter or p...

CVE-2018-6033

CVE-2018-6033 is listed in Debian security notes as affecting the Chromium/Google Chrome stack with a race condition in the Downloads handling when opening downloaded files. The connected documents confirm the vulnerability is associated with chromium-browser and describe it as a race condition, ...

CVE-2018-6169

CVE-2018-6169 relates to Google Chrome/Chromium where a lack of timeout on the extension install prompt allowed a remote attacker to bypass permission checks and trigger installation of a unwanted extension via a crafted HTML page. Affected software is the Chrome/Chromium extension installation f...

CVE-2018-6799

GraphicsMagick prior to 1.3.28 is vulnerable to CVE-2018-6799 via the AcquireCacheNexus in magick/pixel_cache.c. A crafted image can trigger a heap overwrite in the pixel staging area, enabling a remote attacker to cause a denial of service and potentially other impact. A patch is available; advi...

CVE-2018-7054

CVE-2018-7054 affects Irssi prior to 1.0.7 and within the 1.1.x branch before 1.1.1, with a use-after-free when a server is disconnected during netsplits. The issue is tied to an incomplete fix for CVE-2017-7191. Multiple advisories confirm this as a vulnerability in Irssi that can lead to crashe...

CVE-2018-9258

CVE-2018-9258 affects Wireshark 2.4.0–2.4.5 where the TCP dissector could crash; the issue was fixed by preserving valid data sources in epan/dissectors/packet-tcp.c. Related advisories (Debian DLA-1388-1, OpenVAS entries, and vendor advisories) confirm multiple Wireshark-related fixes and advise...