CVE-2018-9258

CVE-2018-9258 affects Wireshark 2.4.0–2.4.5 where the TCP dissector could crash; the issue was fixed by preserving valid data sources in epan/dissectors/packet-tcp.c. Related advisories (Debian DLA-1388-1, OpenVAS entries, and vendor advisories) confirm multiple Wireshark-related fixes and advise...

CVE-2018-9264

CVE-2018-9264 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The ADB dissector could crash due to a heap-based buffer overflow. The root cause is a length inconsistency in the ADB dissector; the fix was implemented in epan/dissectors/packet-adb.c by adding a check for length inconsistencies to p...

CVE-2019-7282

CVE-2019-7282 (netkit-rsh) affects the netkit-rsh client. The Debian LTS advisory (DLA-2822-1) states that two issues exist due to insufficient input validation in path names sent by the server, allowing a malicious server to perform arbitrary file overwrites in the target directory or to modify ...

CVE-2020-16150

CVE-2020-16150 describes a Lucky 13 timing side-channel in mbedtls_ssl_decrypt_buf (library/ssl_msg.c) of Trusted Firmware Mbed TLS up to version 2.23.0. The side-channel arises from padding-length dependent timing in CBC mode, enabling an attacker to recover secret key information. The vulnerabi...

CVE-2020-21533

CVE-2020-21533 affects fig2dev 3.2.7b, with a stack buffer overflow in read_textobject() in read.c. Exploitation could impact availability. Several open-source advisories note affected packages and cite updates to fig2dev 3.2.8 (patch level 8) across distros (e.g., openSUSE/SUSE/Ubuntu/NESSUS ref...

CVE-2020-6073

CVE-2020-6073 affects Videolabs libmicrodns 0.1.0. A vulnerability in the TXT record parsing functionality (RDATA in TXT records) can trigger multiple integer overflows when processing mDNS messages, leading to a denial of service. Exploitation is possible remotely by sending crafted mDNS traffic...

CVE-2021-32272

CVE-2021-32272 affects FAAD2 up to version 2.10.0. A heap-buffer-overflow in function stszin (mp4read.c) can allow a remote attacker to achieve Code Execution . Affected: faad2 before 2.10.0. Root cause: heap-buffer-overflow in mp4read.c. Impact: code execution. Remediation: upgrade to 2.10.0 or ...

CVE-2021-46144

CVE-2021-46144 affects Roundcube Webmail: XSS via an HTML email containing crafted CSS token sequences. Affected versions are Roundcube before 1.4.13 and 1.5.x before 1.5.2. Mitigation: upgrade to 1.4.13+ or 1.5.2+ where patched.

CVE-2022-26360

CVE-2022-26360 affects Xen with IOMMU: RMRR (VT-d) and Unity Mapping (AMD-Vi). The issue arises when mappings for Reserved Memory Regions or Unity Mapping ranges remain accessible after a device activation, allowing subsequent DMA/interrupts to cause IOMMU faults or memory corruption. The connect...

CVE-2022-3109

The connected documents confirm CVE-2022-3109 affects FFmpeg's vp3_decode_frame in libavcodec/vp3.c, where av_malloc() return is not checked, leading to potential NULL pointer dereference and availability impact. Affected advisories (Debian DSA-5394-1, DLA-3454-1) indicate fixes in FFmpeg package...

CVE-2022-39955

This CVE concerns the OWASP ModSecurity Core Rule Set (CRS) with a partial rule set bypass caused by a specially crafted HTTP Content-Type header that signals multiple charset encodings. A vulnerable backend could bypass CRS Content-Type charset allow lists, allowing an encoded payload to bypass ...

CVE-2022-43238

CVE-2022-43238 affects Libde265 v1.0.8 and is due to an unknown crash in ff_hevc_put_hevc_qpel_h_3_v_3_sse within sse-motion.cc, allowing DoS via a crafted video file. Public advisoriesconfirm a DoS impact; several vendors advise upgrading. Remediation (examples): upgrade to libde265 1.0.11+ (Deb...

CVE-2023-52627

CVE-2023-52627 affects the Linux kernel IIO ADC driver for AD7091R-5 devices. The issue was a missing set of event configuration callbacks, causing null pointer dereferences when users attempted to configure or read IIO events and their thresholds. The fix adds event configuration callbacks to re...

CVE-2025-37936

CVE-2025-37936: Linux kernel issue in perf/x86/intel/KVM where MSR_IA32_PEBS_ENABLE loaded for a guest could be masked incorrectly when deriving PEBS_ENABLE, causing guest PEBS to be enabled unintentionally and potentially crash the guest with a flood of #PFs. The fix masks the guest MSR value us...

CVE-2025-37937

CVE-2025-37937 refers to a Linux kernel vulnerability in the objtool/media path for the dib8000 DVB frontend. The issue occurs when dib8000_set_dds() calls dib8000_read32() and receives zero, causing a divide-by-zero. The kernel fix prevents this division by zero, addressing an UBSAN warning seen...

CVE-2025-37969

In CVE-2025-37969, the Linux kernel vulnerable component is the IIO IMU driver st_lsm6dsx (read_tagged_fifo). The issue allows a potential lockup when pattern_len is zero and the device FIFO is not empty, risking an infinite loop and elevated availability impact. The vulnerability has been fixed ...

CVE-2005-3912

CVE-2005-3912: Webmin/miniserv.pl format-string vulnerability (username in login form) can crash or exhaust resources and potentially allow remote code execution when syslog logging is enabled. Affected: Webmin < 1.250 and Usermin

CVE-2009-1888

The CVE-2009-1888 issue affects Samba’s acl_group_override in smbd/posix_acls.c when dos filemode is enabled, allowing remote modification of file ACLs. Affected ranges: Samba 3.0.x before 3.0.35; 3.1.x before 3.1.x (unspecified point); 3.2.x before 3.2.13; 3.3.x before 3.3.6. Mirroring patches i...

CVE-2012-1988

CVE-2012-1988 affects Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, plus Puppet Enterprise users 1.0–2.5.x before 2.5.1. A remote authenticated user with agent SSL keys and file-creation permissions on the Puppet master can craft a file path containing shell metacharacters and trigger arbit...

CVE-2012-3173

CVE-2012-3173 affects the MySQL Server component of Oracle MySQL (versions 5.1.63 and earlier, and 5.5.25 and earlier). The vulnerability is described as unspecified and allows remote authenticated users to affect availability via unknown vectors related to the InnoDB Plugin. Public documents in ...

CVE-2012-5639

CVE-2012-5639 affects OpenOffice/LibreOffice where embedded content is opened automatically without a warning. Public references in Nessus/NCSC suggest OpenOffice has received fixes in OpenOffice 4.1.15, addressing this and related CVEs (e.g., CVE-2023-47804, CVE-2023-1183, CVE-2022-43680). The p...

CVE-2014-5461

CVE-2014-5461 affects Lua 5.1–5.2.x prior to 5.2.3 due to a heap/buffer overflow in the vararg handling in ldo.c. This can cause a crash (denial of service) when a function with many fixed arguments is called with only a small number of arguments. Affected versions include Lua 5.1 through 5.2.x b...

CVE-2014-9664

The CVE-2014-9664 entry concerns FreeType before 2.5.4, which fails to check for the end of data during certain parsing actions when processing a crafted Type42 font. This can allow a remote attacker to cause a denial of service via an out-of-bounds read, with potential unspecified impact. The vu...

CVE-2015-6764

CVE-2015-6764 is an out-of-bounds read in Google V8’s BasicJsonStringifier::SerializeJSArray used by Chrome up to version 47.0.2526.73. The issue allows remote denial-of-service or other impact via crafted JavaScript; Debian advisory confirms the flaw and provides fixed package version 47.0.2526....

CVE-2015-8932

The CVE-2015-8932 issue affects the libarchive library, specifically the compress_bidder_init function in archive_read_support_filter_compress.c, before version 3.2.0. A crafted tar file can trigger an invalid left shift, allowing a remote attacker to cause a denial of service (crash). Public ref...

CVE-2015-8979

CVE-2015-8979 affects DCMTK storescp (dcmtk-3.6.0 and earlier). Root cause is a stack-based buffer overflow in parsePresentationContext triggered by a long string sent over TCP port 4242, enabling a remote denial of service (segmentation fault). Mitigations are the DCMTK package fixes in advisori...

CVE-2016-1526

CVE-2016-1526 concerns Graphite2 Libgraphite’s TtfUtil:LocaLookup in Graphite 2 1.2.4 used by Mozilla Firefox before 43.0 and ESR 38.x before 38.6.1. The bug stems from incorrect validation of a size value in TtfUtil.cpp, enabling remote attackers to trigger an out-of-bounds read, potentially lea...

CVE-2016-5008

CVE-2016-5008 affects libvirt prior to 2.0.0, where setting the VNC password to an empty string fails to disable authentication, allowing an unauthenticated remote attacker to establish a VNC session. The root cause is improper disabling of password checking for VNC when the password is empty. Do...

CVE-2016-5293

CVE-2016-5293 describes a local vulnerability in the Mozilla Updater on Windows: when the Updater log file in the working directory points to a hardlink, an attacker with local access can cause data to be appended to an arbitrary local file. Affected products include Firefox ESR older than 45.5 a...

CVE-2016-7800

GraphicsMagick 1.3.25 and earlier are affected by CVE-2016-7800 due to an integer underflow in the parse8BIM function (coders/meta.c), which can be triggered by a crafted 8BIM chunk to cause a heap-based buffer overflow and a denial of service (application crash). Several connected advisories con...

CVE-2016-8682

CVE-2016-8682 affects GraphicsMagick 1.3.25 and earlier. The ReadSCTImage function in coders/sct.c allows remote attackers to cause a denial of service via an crafted SCT header, due to an out-of-bounds read. Several connected advisories confirm the issue and note that updates contain fixes (e.g....

CVE-2017-12608

CVE-2017-12608 affects the Apache OpenOffice/ OpenOffice Writer DOC file parser (before 4.1.4), specifically in ImportOldFormatStyles. A crafted DOC document can trigger memory corruption leading to denial of service and may potentially allow arbitrary code execution. Exploitation status and exac...

CVE-2017-17856

CVE-2017-17856 affects the Linux kernel kernel/bpf/verifier.c up to version 4.14.8. It enables local users to cause a denial of service via memory corruption due to lack of stack-pointer alignment enforcement. The provided documents do not include exploitation details or a remediation patch/versi...

CVE-2017-2640

CVE-2017-2640 affects Pidgin/libpurple prior to 2.12.0. An out-of-bounds write in parsing XML content (e.g., via invalid XML entities) can allow a remote server to crash the client or, in some cases, execute arbitrary code. Upstream fixes/advise upgrading to 2.12.0 or newer (e.g., libpurple 2.12....

CVE-2017-5356

CVE-2017-5356 affects Irssi versions before 0.8.21, where a string with a formatting sequence (%[) and no closing bracket can trigger an out-of-bounds read and crash. Connected advisories (EulerOS, Debian, Red Hat/Nessus plugins) confirm this CVE as part of a broader Irssi vulnerability set, with...

CVE-2017-7651

CVE-2017-7651 affects Eclipse Mosquitto 1.4.14, where an unauthenticated attacker can trigger a denial-of-service by exhausting memory via crafted CONNECT packets during the MQTT connection phase, potentially impacting the broker. Connected sources corroborate remote DoS risk and reference patche...

CVE-2017-7703

CVE-2017-7703 affects Wireshark 2.0.0–2.0.11 and 2.2.0–2.2.5, where the IMAP dissector could crash due to incorrect line-end calculation. The issue was fixed in code at epan/dissectors/packet-imap.c. Public references indicate multiple vendors published patches/upgrades (e.g., Debian Gentoo advis...

CVE-2017-7848

CVE-2017-7848 affects Mozilla Thunderbird prior to 52.5.2. The issue allows RSS fields to inject new lines into the created email structure, altering the message body. Public entries and advisories confirm Thunderbird upgrades to 52.5.2 as the fix (e.g., CentOS/RHSA-2018:0061, Debian DSA-4075-1 a...

CVE-2018-6087

CVE-2018-6087 describes a use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117. The issue allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The connected sources confirm the root cause (WebAssembly use-after-free) and the impact (remo...

CVE-2018-7324

Wireshark CVE-2018-7324 affects Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12. The flaw is in epan/dissectors/packet-sccp.c and causes an infinite loop, addressed by using a correct integer data type. The description indicates a potential denial-of-service condition via crafted packets. No exploit detai...

CVE-2018-7417

CVE-2018-7417 affects Wireshark 2.2.0–2.2.12 and 2.4.0–2.4.4, where the IPMI dissector could crash due to crafted packets, including those that lack an IPMI header. The issue enables a denial-of-service effect (crash) and is described as triggered by malformed packets or traces. The root cause is...

CVE-2019-19783

CVE-2019-19783 affects Cyrus IMAP (cyrus-imapd) where the lmtpd sieve handling could allow a user to create a mailbox with administrator privileges via a fileinto directive, due to folder handling in autosieve_createfolder() in imap/lmtp_sieve.c. Affected: 2.5.x (before 2.5.15), 3.0.x (before 3.0...

CVE-2020-18771

Exiv2 0.27.99.0 is affected by a global buffer over-read in Nikon1MakerNote::print0x0088 (nikonmn_int.cpp), enabling information leakage. The CVE is CVE-2020-18771. Connected advisories confirm this vulnerability exists in Exiv2 and have prompted remediation discussions. Affected software: Exiv2 ...

CVE-2020-7729

Summary: CVE-2020-7729 affects the grunt package due to insecure YAML loading via js-yaml in grunt.file.readYAML, allowing arbitrary code execution. The issue is triggered by using load() instead of safeLoad(). The vulnerability is discussed across multiple sources, including npm advisory, Ubuntu...

CVE-2021-20299

CVE-2021-20299 affects OpenEXR existing as part of the library’s Multipart input file handling. A crafted multipart input file containing no actual parts can trigger a NULL pointer dereference, with the highest reported impact on system availability. Public references in Debian’s DLA-3236-1 indic...

CVE-2023-32307

Sofia-SIP (SIP UAs) has CVE-2023-32307 describing multiple vulnerabilities in STUN packet handling, including heap overflow and OOB read caused by missing attributes length checks. Attacks could crash or cause high memory usage; these issues were addressed in version 1.13.15, with upgrades advise...

CVE-2023-39352

CVE-2023-39352 affects FreeRDP (RDP client library). The issue is an invalid offset validation that can cause an Out Of Bounds Write when rect->left/top equal surface->width/height, potentially crashing the client. The vulnerability affects versions prior to the fix, with patches addressed ...

CVE-2023-47272

CVE-2023-47272 affects Roundcube Webmail (1.5.x before 1.5.6 and 1.6.x before 1.6.5). The underlying issue is improper handling of header values (Content-Type/Content-Disposition) when processing attachments, enabling a cross-site scripting (XSS) vulnerability via attachment preview or download. ...

CVE-2025-37808

CVE-2025-37808 concerns the Linux kernel crypto: null algorithm. The issue arises because the default null algorithm may be freed in softirq context via af_alg, allowing a race that is mitigated by using spin locks instead of mutexes to protect the default null algorithm. The vulnerability is des...

CVE-2025-37901

The CVE-2025-37901 issue affects the Linux kernel irqchip/qcom-mpm driver. On Qualcomm chipsets, some GPIOs are not wake-capable and lack a corresponding MPM pin; the IRQ domain hierarchy is still applied unless explicitly disconnected. This caused crashes when setting up interrupts for non-wake ...