CVE-2025-38298

CVE-2025-38298 corresponds to a Linux kernel EDAC issue (EDAC/skx_common) where reloading i10nm_edac after unloading and reloading can trigger a general protection fault. The root cause was that the adxl_component_count variable, which tracks ADXL components, was not reset during the reload seque...

CVE-2025-38464

CVE-2025-38464 affects the Linux kernel Tipc subsystem. The issue is a use-after-free in tipc_conn_close() that can occur when tipc_topsrv_stop() iterates tipc_net(net)->topsrv->conn_idr and calls tipc_conn_close() for each tipc_conn after releasing the IDR lock. If tipc_conn_recv_work() is...

CVE-2010-2803

CVE-2010-2803 affects the Linux kernel DRM subsystem. The drm_ioctl path in drivers/gpu/drm/drm_drv.c allows a local user to request a large memory allocation and may leak kernel memory contents. Affected trees/versions include 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2...

CVE-2010-4078

CVE-2010-4078 affects the Linux kernel before 2.6.36-rc6, where the sisfb_ioctl function in drivers/video/sis/sis_main.c fails to properly initialize a structure member. This allows local users to leak potentially sensitive information from kernel stack memory via the FBIOGET_VBLANK ioctl. Connec...

CVE-2011-1783

The CVE-2011-1783 issue affects the mod_dav_svn Apache module distributed with Apache Subversion 1.5.x and 1.6.x up to 1.6.17. When SVNPathAuthz short_circuit is enabled, a remote attacker can trigger an infinite loop that leads to memory consumption and, in opportunistic circumstances, a denial ...

CVE-2013-5705

Affected software: ModSecurity (Apache module) before 2.7.6. Root cause: flawed handling of chunked Transfer-Encoding with a capitalized Chunked value in the HTTP header. Impact: remote attackers can bypass mod_security rules. Remediation: upgrade to ModSecurity 2.7.6 or newer (as cited by multip...

CVE-2014-0481

CVE-2014-0481 affects Django’s file upload handling. The issue arises when uploading files with conflicting names, where Django’s default sequential file-naming process can be exploited to cause a remote denial of service via CPU consumption. Affected Django versions per description: before 1.4.1...

CVE-2014-5270

Libgcrypt prior to 1.5.4, used in GnuPG and other products, has a weakness in ciphertext normalization and ciphertext randomization. This side-channel condition could allow physically proximate attackers to perform key-extraction attacks by collecting voltage data from exposed metal. The CVE entr...

CVE-2014-6310

CVE-2014-6310 describes a buffer overflow in CHICKEN (versions 4.9.0 and 4.9.0.1) that may allow remote attackers to execute arbitrary code via the 'select' function. The connected documents confirm the affected product and the vulnerable vector, but do not provide specific exploit details, PoCs,...

CVE-2014-9661

CVE-2014-9661 in FreeType 2.x prior to 2.5.4 affects type42/t42parse.c, where parsing can be incomplete without triggering an error. This leads to a denial of service via a crafted Type42/OpenType font and may cause a use-after-free or other unspecified impact. The vulnerability is triggered when...

CVE-2015-0252

CVE-2015-0252 affects the Xerces-C XML parser. A flaw in how the parser processes certain malformed XML caused a crash (segmentation fault) in xerces-c’s XMLReader, leading to a denial of service. Connected advisories confirm a patch was backported and an updated xerces-c package is released (Cen...

CVE-2015-5144

CVE-2015-5144 affects Django prior to 1.4.21, 1.5.x–1.6.x, 1.7.x prior to 1.7.9, and 1.8.x prior to 1.8.3. The root cause is an incorrect regular expression in built‑in validators, enabling remote attackers to inject arbitrary headers and perform HTTP response splitting via newline characters in ...

CVE-2015-8558

CVE-2015-8558 is a QEMU USB EHCI emulation flaw in ehci_process_itd that can cause an infinite loop and CPU DoS when a circular iTD list is processed. A privileged guest user could exploit this locally. Debian security advisory DSA-3471-1 notes a fix in qemu for Jessie: upgrade to 1:2.1+dfsg-12+d...

CVE-2016-7163

OpenJPEG vulnerability CVE-2016-7163 is caused by an integer overflow in opj_pi_create_decode (pi.c), enabling crafted JP2 files to trigger out-of-bounds read/write and potentially execute arbitrary code. Affected: OpenJPEG library across multiple platforms; root cause and impact summarized in li...

CVE-2016-9963

Exim (mail transfer agent) is affected by CVE-2016-9963. Exim before 4.87.1 may leak the private DKIM signing key to log files via vectors related to log files and bounce messages. The leakage is contingent on specific configurations and log access, enabling an attacker with log access to obtain ...

CVE-2017-15408

Summary of CVE-2017-15408 : A heap overflow vulnerability was reported in the Google Chrome Omnibox, caused by a PDFium mishandling of crafted PDF files. The issue affects Chrome versions prior to 63.0.3239.84. The root cause is a heap overflow in the pdfium component used when processing PDFs in...

CVE-2017-17084

Wireshark CVE-2017-17084 affects the IWARP_MPA dissector; root cause is a crash from malformed IWARP MPA data due to insufficient validation. The fix involves validating the ULPDU length in epan/dissectors/packet-iwarp-mpa.c to prevent the crash. Exploit details and affected versions are not full...

CVE-2017-17783

GraphicsMagick 1.3.27a is affected by a buffer over-read in ReadPALMImage (coders/palm.c) when QuantumDepth is 8 (CVE-2017-17783). The issue is documented across multiple advisories with the affected component and a fix in newer releases. Affected packages include GraphicsMagick; remediation advi...

CVE-2017-5045

CVE-2017-5045 affects Chromium/Google Chrome’s XSS Auditor, described in connected docs as an information disclosure vulnerability. The issue is within the XSS Auditor component of Chromium/Chrome, enabling leakage of sensitive data via crafted HTML interactions. The Debian/Arch Linux advisories ...

CVE-2017-5946

CVE-2017-5946 – Rubyzip directory traversal vulnerability : The Zip::File component of the rubyzip gem for Ruby (pre-1.2.1) allows a ZIP archive to write files outside the target directory when a ZIP upload contains paths with "..". This enables arbitrary file writes on the filesystem if a site p...

CVE-2017-5974

CVE-2017-5974 affects zziplib, with heap-based buffer overflow in __zzip_get32 (fetch.c) in zziplib 0.13.62 (and earlier 0.13.56–0.13.61) that can crash the process or, per some advisories, enable arbitrary code execution when processing crafted ZIP files. Multiple advisories confirm affected ver...

CVE-2017-5975

CVE-2017-5975 is a heap-based buffer overflow in zziplib’s fetch.c (__zzip_get64) affecting versions up to 0.13.62 (and older 0.13.56–0.13.61). Exploitation via a crafted ZIP file can crash the affected process (denial of service); remote attackers may exploit this to crash the application. Multi...

CVE-2017-7756

CVE-2017-7756 is a use-after-free/use-after-scope vulnerability affecting Firefox <54, Firefox ESR <52.2, and Thunderbird

CVE-2017-7764

CVE-2017-7764 concerns a domain spoofing issue in the address bar caused by mixing Canadian Syllabics with Latin characters in IDN rendering. Affected products include Firefox before 54, Firefox ESR before 52.2, and Thunderbird before 52.2. The vulnerability arises from the Unicode handling that ...

CVE-2017-7825

The CVE-2017-7825 entry describes an OS X–specific issue where several fonts render Tibetan and Arabic characters as whitespace. When such characters appear in an IDN in the address bar, they enable domain name spoofing. Affected products include Mozilla Firefox versions earlier than 56 and Firef...

CVE-2017-9469

CVE-2017-9469 affects Irssi prior to 1.0.3. By processing certain incorrectly quoted DCC files, Irssi attempts to locate the terminating quote one byte before the allocated memory, which can cause a crash and a denial of service. This is part of a pair of flaws in DCC handling (the other being CV...

CVE-2018-17461

CVE-2018-17461 affects Google Chrome via PDFium. An out-of-bounds read in PDF rendering could be triggered by a crafted PDF file, allowing a remote attacker to read memory. Affected: Google Chrome prior to 68.0.3440.75 (PDFium component). Impact per CVSS3: High (partial confidentiality/integrity/...

CVE-2018-6544

MuPDF 1.12.0 (Artifex MuPDF) contains CVE-2018-6544 in pdf_load_obj_stm (pdf/pdf-xref.c): object streams can be referenced recursively, causing exhaustion of the error stack and enabling a remote denial of service via a crafted PDF. Multiple Arch Linux advisories (ASA-201805-4/5/6/7/8) describe t...

CVE-2018-7323

CVE-2018-7323 affects Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12; the epan/dissectors/packet-wccp.c dissector contained a large loop that could be mitigated by ensuring that a calculated length increases monotonically. The connected documents confirm the vulnerability and describe the remediation as ...

CVE-2018-9260

CVE-2018-9260 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The IEEE 802.15.4 dissector could crash due to a missing allocation step; Wireshark fixed this in epan/dissectors/packet-ieee802154.c by ensuring an allocation step occurs. Reports from multiple vendors (e.g., SUSE/openSUSE advisories)...

CVE-2018-9267

CVE-2018-9267 is a memory leak in the LAPD dissector (epan/dissectors/packet-lapd.c) affecting Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The vulnerability is documented in multiple sources, which list the affected versions and component, but do not provide exploitation details. Mitigation reference...

CVE-2020-21596

CVE-2020-21596 affects libde265 1.0.4, with a global buffer overflow in the decode_CABAC_bit function. A crafted file can exploit this, and multiple sources report potential denial of service outcomes (and related issues in the family of libde265 CVEs). Public technical details in connected docum...

CVE-2020-6071

CVE-2020-6071 affects Videolabs libmicrodns 0.1.0, where the mDNS label parsing uses compressed pointers without recursion checks. This can allow a remote attacker to trigger a denial-of-service via crafted mDNS messages that exploit the compression pointer handling. Public references in connecte...

CVE-2021-20303

CVE-2021-20303 pertains to OpenEXR: a flaw in function dataWindowForTile() within IlmImf/ImfTiledMisc.cpp could allow an attacker-provided crafted OpenEXR file to trigger an integer overflow, causing an out-of-bounds write on the heap. Impact is primarily on availability, with possible data integ...

CVE-2021-28702

CVE-2021-28702 concerns Xen PCI devices with Reserved Memory Regions (RMRR) not properly deassigned on guest shutdown, causing IOMMU page tables to be left referencing freed data structures and leading to unpredictable DMA/interrupt behavior (IOMMU faults or memory corruption). The issue is addre...

CVE-2021-40516

CVE-2021-40516 affects WeeChat before 3.2.1. The vulnerability is in the Relay plugin’s WebSocket handling, specifically an out-of-bounds read in plugins/relay/relay-websocket.c, which an attacker can trigger remotely to cause a denial of service (crash). Connected sources confirm affected versio...

CVE-2021-41141

CVE-2021-41141 affects PJSIP PJPROJECT. Root cause: in multiple code paths, errors/failures cause a function to return without releasing held locks, potentially deadlocking the system and causing denial of service. Affected versions: all up to and including 2.11.1. Mitigation: upgrades fixed in a...

CVE-2022-0367

CVE-2022-0367 affects libmodbus; a heap-based buffer overflow was found in modbus_reply() (src/modbus.c). Public advisories and multiple Debian/openSUSE/Nessus entries confirm this vulnerability and have issued security updates to libmodbus packages (e.g., Debian 3.1.4-2+deb10u2, 3.1.6-2+deb11u1;...

CVE-2022-36440

CVE-2022-36440 is a FRRouting FRR issue in the frr-bgpd component where a reachable assertion in the function peek_for_as4_capability can be triggered by crafted BGP OPEN packets, leading to a Denial of Service. The connected advisories (Debian DLA-3573/DSA-5495, Red Hat RHSA-2023-6434, Oracle Li...

CVE-2022-43237

Libde265 v1.0.8 contains a stack-buffer-overflow via void put_epel_hv_fallback in fallback-motion.cc, enabling DoS via a crafted video file. Evidence appears in multiple advisories (Debian DSA 5346-1; Cloud Foundry USN-6627-1; Gentoo GLSA 202408-20) and in Astra/FreeBSD security notes. Remediatio...

CVE-2025-23160

CVE-2025-23160 affects the Linux kernel on Mediatek platforms with a system companion processor (SCP). The issue is a resource leak in the Media subsystem (vcodec) during firmware initialization when the mtk_scp structure is not properly freed, leading to a leak if firmware initialization allocat...

CVE-2025-38445

CVE-2025-38445 covers a Linux kernel issue in md/raid1 where raid1_reshape allocated a mempool on the stack and assigned it to conf->r1bio_pool, causing conf->r1bio_pool.wait.head to reference a stack address. Subsequent access in raid1_read_request/raid1_write_request paths could trigger a...

CVE-2025-38498

CVE-2025-38498 is a Linux kernel vulnerability described in the sources as: the function do_change_type() should refuse to operate on unmounted or not-our mounts, with propagation settings restricted to mounts within the caller’s mount namespace. The described impact is local, with potential for ...

CVE-2025-9086

CVE-2025-9086 affects curl’s curl/libcurl component. Reports indicate an out-of-bounds read when handling a cookie path for a secure cookie, which can cause a crash or potentially allow memory-read conditions. The vulnerability is documented across multiple advisories and vendor pages, including ...

CVE-2002-0839

CVE-2002-0839 affects Apache 1.3.x prior to 1.3.27. The vulnerability stems from the shared memory scoreboard in the HTTP daemon, where a user running as the Apache UID can modify parent[].pid and parent[].last_rtime, enabling the process to receive a SIGUSR1 signal with potential root-level effe...

CVE-2004-0889

CVE-2004-0889 involves multiple integer overflows in xpdf 3.0 and in code paths that reuse xpdf (e.g., in CUPS) that can be exploited remotely to crash the service (DoS) and potentially execute arbitrary code. The description confirms a remote impact and the possibility of code execution, tied to...

CVE-2006-2935

CVE-2006-2935 affects the Linux kernel starting with 2.2.16 and later, where the dvd_read_bca function in the DVD handling code (drivers/cdrom/cdrom.c) assigns the wrong value to a length variable, enabling a local user to trigger a buffer overflow via a crafted USB Storage device and execute arb...

CVE-2009-1270

CVE-2009-1270 affects ClamAV prior to 0.95. The issue is in libclamav/untar.c where a crafted TAR file can cause an infinite loop, leading to a denial of service by hanging clamd and clamscan. Public documentation in connected sources confirms the vulnerable component and its impact, with remedia...

CVE-2009-3553

CVE-2009-3553 is a use-after-free vulnerability in CUPS’ cupsdDoSelect path (scheduler/select.c) affecting the CUPS daemon when listing many print jobs. The issue arises from improper reference-count maintenance, allowing a remote attacker to trigger a denial of service (daemon crash or hang) via...

CVE-2010-0748

Transmission before 1.92 is affected by a denial-of-service vulnerability triggered by a large number of tr arguments in a magnet link, allowing a crash and possibly other unspecified impact. Affected component is Transmission’s magnet-link parsing; root cause is handling of excessive tr argument...