CVE-2025-37905

CVE-2025-37905 affects the Linux kernel in the firmware: arm_scmi subsystem, where destroying SCMI devices via device_find_child() creates an unbalanced device refcount because device_find_child() performs an implicit get_device(). This prevents release methods from running during destruction, ca...

CVE-2025-37979

CVE-2025-37979 affects the Linux kernel ASoC: qcom sc7280 LPASS driver. A commit introduces case values in the sc7280 lpass driver (e.g., RX_CODEC_DMA_RX_0 in sc7280_snd_hw_params) that can trigger out-of-bounds accesses in driver data arrays. The issue is mitigated by redefining LPASS_MAX_PORTS ...

CVE-2025-38077

CVE-2025-38077 affects the Linux kernel, in platform/x86 dell-wmi-sysman. The root cause was a potential buffer overflow when current_password_store() accessed buf[length-1] after an empty string length. A check for empty strings was added. The Azure Linux Nessus advisory confirms the fix and rec...

CVE-2025-38459

CVE-2025-38459: Linux kernel ATM CLIP module vulnerability causing Denial of Service via infinite recursion in clip_push(). Root cause: second ATMARP_MKIP ioctl triggers recursion when vcc->old_push is used after first call; mitigation implemented by checking vcc->user_back (clip_vcc) and u...

CVE-2025-38471

CVE-2025-38471 concerns the Linux kernel TLS path. The TLS queue can operate on an old skb after aggressive net-next skb compaction, leading to a slab-use-after-free in tls_strp_check_rcv. The Astra Linux bulletin confirms the fix is to always refresh the queue when reading a socket, instead of r...

CVE-2007-2442

CVE-2007-2442 affects MIT Kerberos 5 (krb5) RPC library. In krb5 1.6.1 and earlier, the function gssrpc__svcauth_gssapi can mishandle a zero-length RPC credential, causing kadmind to free an uninitialized pointer during cleanup. This remote flaw could enable arbitrary code execution on vulnerable...

CVE-2009-3939

CVE-2009-3939 affects the Linux kernel megaraid_sas driver: the poll_mode_io file has world-writable permissions in kernel 2.6.31.6 and earlier. This enables local users to change the driver I/O mode by modifying the file. The description notes local access and manipulation of driver behavior, wi...

CVE-2011-2690

CVE-2011-2690 affects libpng across multiple branches (1.0.x <1.0.55, 1.2.x <1.2.45, 1.4.x <1.4.8, 1.5.x

CVE-2012-1973

CVE-2012-1973 is a use-after-free vulnerability in Mozilla Firefox family components. The issue arises in nsObjectLoadingContent::LoadObject, affecting Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12. Expl...

CVE-2012-1975

CVE-2012-1975 is a Use-after-free vulnerability in PresShell::CompleteMove affecting Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12. It potentially allows remote code execution or a denial of serv...

CVE-2013-2739

CVE-2013-2739 affects MiniDLNA and is described as a heap-based buffer overflow. Multiple connected sources (NVD, Red Hat, Ubuntu, OSV, Debian, CVE list, etc.) corroborate this vulnerability. NVD metrics show CVSS v3.1 base score 9.8 (CRITICAL) with network attack, no privileges required, no user...

CVE-2015-1244

CVE-2015-1244 affects Google Chrome prior to 42.0.2311.90. The issue lies in URLRequest::GetHSTSRedirect in url_request/url_request.cc, which does not replace the ws scheme with the wss scheme when an HSTS policy is active, enabling potential disclosure of sensitive WebSocket data via network sni...

CVE-2015-4106

CVE-2015-4106 : QEMU does not properly restrict write access to the PCI config space for certain PCI passthrough devices, which the documents describe as enabling local x86 HVM guests to gain privileges, cause host crashes, obtain sensitive information, or suffer other unspecified impact. The con...

CVE-2015-8782

CVE-2015-8782 is a LibTIFF vulnerability in tif_luv.c that allows an attacker to trigger out-of-bounds writes via a crafted TIFF image, potentially enabling arbitrary code execution with the privileges of the image-processing component. Public advisories note this is one of multiple LibTIFF flaws...

CVE-2015-8931

CVE-2015-8931 involves multiple integer overflows in libarchive’s mtree support. The vulnerability arises in archive_read_support_format_mtree.c (mtree parser) in libarchive before 3.2.0, potentially allowing a remote attacker to trigger undefined behavior via a crafted mtree file. Connected advi...

CVE-2016-0668

CVE-2016-0668 affects Oracle MySQL 5.6.28 and earlier, 5.7.10 and earlier, and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12. The vulnerability is described as an unspecified issue related to InnoDB that can allow local users to affect availability. Remediation stated in the sources inc...

CVE-2016-2073

CVE-2016-2073 affects libxml2: a vulnerability in htmlParseNameComplex() can cause a heap-based buffer overflow / out-of-bounds read, leading to potential denial of service or code execution when processing a crafted XML file. The connected IBM/IBM Guards pages confirm the issue and list affected...

CVE-2016-4609

CVE-2016-4609 affects libxslt across Apple platforms: iOS prior to 9.3.3, OS X prior to 10.11.6, iTunes prior to 12.4.2 on Windows, iCloud prior to 5.2.1 on Windows, tvOS prior to 9.2.2, and watchOS prior to 2.2.2. The vulnerability allows remote attackers to cause a denial of service via memory ...

CVE-2016-7045

CVE-2016-7045 affects the IRC client Irssi prior to version 0.8.20. The vulnerability lies in the format_send_to_gui function of the format parsing code, where input length handling can be exploited by a remote attacker to cause a denial of service via heap corruption and a crash. Affects multipl...

CVE-2016-8734

CVE-2016-8734 affects Apache Subversion’s mod_dontdothat and HTTP(S) clients (versions 1.4.0–1.8.16 and 1.9.0–1.9.4). The root cause is exponential XML entity expansion, leading to denial-of-service via high CPU/memory usage. Multiple advisories confirm impact across distros (Debian, Mageia, Fedo...

CVE-2016-9916

QEMU 9pfs vulnerability CVE-2016-9916: memory leak in hw/9pfs/9p-proxy.c due to missing cleanup in the proxy backend, allowing a local privileged guest to exhaust host memory and potentially crash the QEMU process. Affected: QEMU with 9p filesystem (proxy backend). Root cause: missing cleanup ope...

CVE-2017-11683

The CVE-2017-11683 entry concerns Exiv2 0.26 with a reachable assertion in Internal::TiffReader::visitDirectory (tiffvisitor.cpp) that can enable a remote denial of service via crafted input. Connected sources confirm this is a real issue affecting Exiv2’s TIFF/metadata parsing path, not a local ...

CVE-2017-12082

CVE-2017-12082 affects Blender’s mesh loading: an exploitable integer overflow in the CustomData path can overflow a buffer and allow code execution when a user edits a crafted object in a .blend file linked to an external data source. The issue is triggered via the Blender environment and is tie...

CVE-2017-13777

CVE-2017-13777 affects GraphicsMagick 1.3.26. The issue is a denial-of-service in ReadXBMImage() within coders/xbm.c (Read hex image data) when version==10, causing the reader to not return and consume CPU and memory. The crafted file itself does not request heavy resources. Public details specif...

CVE-2017-15407

The CVE-2017-15407 entry concerns an Out-of-bounds write in the QUIC networking stack of Google Chrome, prior to version 63.0.3239.84, allowing a remote attacker to achieve code execution via a malicious server. Affected software is Google Chrome (and Chromium-based components) with the vulnerabl...

CVE-2017-16516

CVE-2017-16516 – yajl-ruby (Ruby gem 1.3.0) The vulnerability concerns the yajl-ruby gem used with Ruby. When a crafted JSON is parsed via Yajl::Parser.new.parse, the process can crash with a SIGABRT in yajl_encode.c: yajl_string_decode, potentially causing a denial of service. The initial descri...

CVE-2017-17499

CVE-2017-17499 : ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read (Magick++/lib/Image.cpp). This indicates a vulnerability in the ImageMagick image processing library that can be triggered during image reading. The initial document lists this CVE wit...

CVE-2017-5093

CVE-2017-5093 describes an issue in Blink’s modal dialog handling in Google Chrome prior to 60.0.3112.78 across Mac, Windows, Linux and Android. A crafted HTML page could cause the browser to fail to display a full-screen warning, potentially affecting user attention for critical UI prompts. The ...

CVE-2017-5333

The CVE-2017-5333 issue affects icoutils, specifically the wrestool component. A local integer overflow in the extract_group_icon_cursor_resource path can be triggered by parsing crafted executables, leading to memory corruption and potential code execution or a crash. Public advisories (e.g., Re...

CVE-2017-7829

CVE-2017-7829 is a Thunderbird vulnerability in which the sender’s address can be spoofed. The real sender is hidden if a null character precedes the display string, causing the recipient to see an arbitrary address. Affected product is Mozilla Thunderbird prior to 52.5.2. The issue is described ...

CVE-2017-9373

CVE-2017-9373 is a memory-leak vulnerability in QEMU when built with IDE AHCI Emulation. A local privileged user can trigger a denial of service by repeatedly hot-unplugging the AHCI device, causing memory consumption on the host. Affected software/conditions are as described in the CVE entry; ex...

CVE-2017-9727

The CVE-2017-9727 issue affects Artifex Ghostscript GhostXPS 9.21. The gx_ttfReader__Read function (base/gxttfb.c) is vulnerable, allowing remote attackers to trigger a denial of service via a crafted document through a heap-based buffer over-read, potentially causing an application crash. Connec...

CVE-2018-14395

CVE-2018-14395 affects FFmpeg 3.2 and 4.0.2, where in libavformat/movenc.c a crafted audio file can trigger a divide-by-zero, causing a denial of service (application crash) when converting to MOV audio. Connected advisories confirm fixes in FFmpeg updates (e.g., SUSE SUSE-SU-2019:1299-1/2 and De...

CVE-2018-8020

CVE-2018-8020 affects Apache Tomcat Native 1.2.0–1.2.16 and 1.1.23–1.1.34. The flaw: OCSP pre-produced responses are not properly checked, so revoked client certificates may not be identified in mutual-TLS connections. This vulnerability is explicitly tied to OCSP checking; systems not using OCSP...

CVE-2019-11455

CVE-2019-11455 is a buffer over-read in Monit’s Util_urlDecode (util.c). Pre-fix versions are affected; multiple advisories note the issue alongside CVE-2019-11454. Ubuntu/Debian/Fedora and Mageia/NASL records indicate fixes in updated Monit packages across distros (e.g., Debian 9 stretch fix in ...

CVE-2020-21530

CVE-2020-21530 affects fig2dev 3.2.7b, where a segmentation fault occurs in read.c::read_objects. The vulnerability is shown across multiple Linux distributions (Red Hat, Ubuntu, openSUSE/SUSE) as an unpatched issue; remediation is to upgrade to fig2dev 3.2.8 (Patchlevel 8b) or apply the vendor p...

CVE-2020-26298

CVE-2020-26298 affects the Redcarpet Ruby gem (rubygem-redcarpet) prior to 3.5.1, where HTML escaping was not performed for quotes, enabling a cross-site scripting (XSS) vector. The issue is fixed in version 3.5.1 (via the referenced commit); upgrading to 3.5.1 or newer mitigates the vulnerabilit...

CVE-2020-6077

Libmicrodns 0.1.0 from Videolabs contains a denial-of-service vulnerability in the mDNS message parsing that can lead to an out-of-bounds read. The issue arises when parsing mDNS messages and not properly tracking available data, enabling an attacker to trigger a crash. Affected component: libmic...

CVE-2021-33912

Libspf2 prior to 1.2.11 contains a four-byte heap-based buffer overflow triggered by crafting SPF DNS records, due to incorrect sprintf usage in SPF_record_expand_data (spf_expand.c). This can allow a remote attacker to execute arbitrary code via an unauthenticated email message. The vulnerabilit...

CVE-2021-36054

Exempi (XMP Toolkit SDK) v2020.1 and earlier is affected by CVE-2021-36054, a heap-based buffer overflow vulnerability in the XMP toolkit. Exploitation requires the user to open a crafted file, potentially causing a local denial of service (and, per related advisories, may enable arbitrary code e...

CVE-2021-38173

CVE-2021-38173 affects btrbk prior to version 0.31.2. The issue arises from mishandling remote hosts filtering SSH commands via ssh_filter_btrbk.sh in authorized_keys, enabling remote command execution. Affected products are btrbk before 0.31.2; upstream fixes upgrade to 0.31.2 or newer. No explo...

CVE-2021-45341

CVE-2021-45341 is a buffer overflow in CDataMoji of the jwwlib component within LibreCAD 2.2.0-rc3 and older, enabling Remote Code Execution via a crafted JWW document. Connected advisories confirm this affects LibreCAD/libdxfrw ecosystems and correlate with other CVEs (e.g., 45342, 45343) in rel...

CVE-2022-0544

CVE-2022-0544 concerns Blender’s DDS loader, where an integer underflow can trigger an out-of-bounds read. The vulnerability affects Blender versions prior to 2.83.19, 2.93.8, and 3.1, as described in connected sources. The issue arises in how the DDS image is parsed, potentially allowing an atta...

CVE-2022-1049

CVE-2022-1049 concerns the Pacemaker configuration tool (pcs) where the daemon allowed expired accounts and accounts with expired passwords to authenticate via PAM, enabling login for unprivileged expired accounts. Connected advisories/plugins reference affected packages across multiple distribut...

CVE-2022-43244

Libde265 v1.0.8 contains a heap-buffer-overflow vulnerability via put_qpel_fallback in fallback-motion.cc, enabling DoS through a crafted video file. Affected component: libde265 (H.265 codec). Root cause: heap-buffer overflow in fallback-motion.cc. Impact: Denial of Service; no exploitation deta...

CVE-2023-40569

FreeRDP (RDP client/server library) has an Out-of-Bounds Write in progressive_decompress caused by miscalculation of nXSrc/nYSrc. Affected releases require upgrade; fixed in versions 2.11.0 and 3.0.0-beta3. Impact trained as potential crashes; no public exploit details in provided docs. Remediati...

CVE-2024-26771

Linux kernel CVE-2024-26771Fix: The TI edma (dmaengine) driver now includes null-pointer checks in edma_probe to guard against NULL from devm_kasprintf() (which can return NULL on failure). This prevents a potential NULL dereference in the kasprintf allocation path. Patch references in the Linux ...

CVE-2024-26787

Technical details about CVE-2024-26787 are not provided in the supplied documents. Monitor official advisories for updates on affected products, impact, and fixes.

CVE-2024-35813

CVE-2024-35813 affects the Linux kernel MMC core. The issue arises when accessing an array of idatas in the MMC close-ended ffu path, where prev_idata = idatas[i - 1] is performed without verifying that i > 0, enabling a negative/index-out-of-bounds access. The vulnerability is resolved by add...

CVE-2025-37897

CVE-2025-37897 affects the Linux kernel wifi driver (plfxlc) where plfxlc_mac_release() asserts mac->lock, which is incorrect because mac->lock cannot be held when probe fails or the device is disconnected. The issue can trigger a kernel warning (warning trace shown in the advisory) and is ...