CVE-2017-11407

CVE-2017-11407 affects Wireshark MQ dissector. A crafted MQ packet could trigger memory allocation issues leading to denial of service; root cause was insufficient fragment-length validation before reassembly. Upstream fix implemented in packet-mq.c (validation prior to reassembly) and bundled in...

CVE-2017-12166

CVE-2017-12166 affects OpenVPN prior to 2.3.3 and prior to 2.4.4, due to a buffer overflow in the read_key/key-method handling (read_key() stack-based overflow reported by security advisories). Exploitation could lead to remote code execution. Remediation across tracked disclosures: upgrade to Op...

CVE-2017-12378

CVE-2017-12378 affects ClamAV before 0.99.3 (0.99.2 and prior). The issue is an input validation weakness when handling TAR files, leading to a checksum buffer over-read during scanning of malicious tar archives and resulting in DoS on the affected device. Connected sources also identify related ...

CVE-2017-13769

CVE-2017-13769 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-17381

CVE-2017-17381 is rejected/not used per the Initial Description.

CVE-2017-18359

CVE-2017-18359 affects PostGIS 2.x before 2.3.3 when used with PostgreSQL. The issue arises in the ST_AsX3D function, where empty geometries are mishandled, allowing a remote attacker to trigger a denial of service (as evidenced by abnormal server termination with inputs like ST_AsX3D('LINESTRING...

CVE-2017-6472

CVE-2017-6472 affects Wireshark 2.2.0–2.2.4 and 2.0.0–2.0.10. The vulnerability in the RTMPT dissector can cause an infinite loop when processing certain packets (injected packets or malformed captures). Root cause identified as the RTMPT code not incrementing a sequence value correctly in epan/d...

CVE-2017-9349

CVE-2017-9349 affects the DICOM dissector in Wireshark from 2.0.0–2.0.12 and 2.2.0–2.2.6, where an infinite loop could be triggered. The root cause is a length value not being validated, leading to a looping condition. The issue was fixed upstream by validating the length in epan/dissectors/packe...

CVE-2017-9403

CVE-2017-9403 is a vulnerability in LibTIFF 4.0.7 where a memory leak in the function TIFFReadDirEntryLong8Array (tif_dirread.c) can cause a denial of service when processing a crafted TIFF file. The public description confirms the impact as DoS via memory leak; exploitation details, affected pat...

CVE-2017-9868

CVE-2017-9868 affects Mosquitto

CVE-2018-0488

mbed TLS on ARM prior to version 2.7.0 is vulnerable to CVE-2018-0488 when the truncated HMAC extension and CBC are used. A crafted TLS/DTLS packet can enable remote arbitrary code execution or a denial of service via heap corruption. Remediation per connected sources: upgrade to the fixed releas...

CVE-2018-0489

CVE-2018-0489 concerns the xmltooling library (XMLTooling-C) used by Shibboleth Service Provider and related products. The vulnerability arises in versions of xmltooling before 1.6.4 where digital signatures of user data are mishandled, enabling remote attackers to obtain sensitive information or...

CVE-2018-16335

CVE-2018-16335 concerns LibTIFF 4.0.9. The flaw is in newoffsets handling in ChopUpSingleUncompressedStrip (tif_dirread.c), allowing a remote attacker to cause a heap-based buffer overflow and application crash (denial of service) via a crafted TIFF file, as demonstrated by tiff2pdf. The initial ...

CVE-2018-5207

CVE-2018-5207 affects Irssi before 1.0.6. The vulnerability arises when using an incomplete variable argument, allowing an out-of-bounds read by accessing data beyond the end of a string. This can crash the application, contributing to potential denial of service. Public mitigations are to upgrad...

CVE-2018-6117

CVE-2018-6117 affects Google Chrome prior to 66.0.3359.117, where confusing Autofill settings could allow a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Public references in the CVE indicate Chrome/Chromium impact and that fixes were rel...

CVE-2018-6151

CVE-2018-6151 concerns a bad cast in Chrome DevTools that allowed an attacker, by convincing a user to install a crafted Chrome extension, to trigger an out-of-bounds memory read. Affected software: Google Chrome with DevTools prior to 66.0.3359.117. The issue is addressed in later Chrome release...

CVE-2018-7331

Wireshark vulnerability CVE-2018-7331 affects Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12, where the epan/dissectors/packet-ber.c parser could enter an infinite loop due to improper length handling. The issue was fixed by validating lengths in the BER dissector. Exploitation via crafted packets or mal...

CVE-2018-8764

CVE-2018-8764 affects LDAP Account Manager (Roland Gruber Softwareentwicklung) prior to 6.3. The flaw exposes the CSRF token in the sec_token parameter of a URI, enabling an attacker to bypass CSRF protection by leveraging logging and potentially perform unauthorized actions in a logged-in sessio...

CVE-2019-8354

SoX 14.4.2 is affected by CVE-2019-8354 due to an integer overflow in lsx_make_lpf (effect_i_dsp.c) that leads to a heap-based buffer overflow when allocating memory. ENISA OSV entries and Mageia/Ubuntu/Nessus advisories corroborate the issue and list it alongside other SoX CVEs (e.g., 2019-8355,...

CVE-2020-21599

CVE-2020-21599 affects libde265 version 1.0.4, with a heap buffer overflow in the de265_image::available_zscan function that can be triggered by a crafted file. The connected sources corroborate this vulnerability and its association with libde265’s H.265 decode path. Remediation is to upgrade to...

CVE-2020-6498

CVE-2020-6498 is described in the initial document as a user interface error in Google Chrome on iOS prior to 83.0.4103.88, with domain spoofing via a crafted HTML page (as per the description). Connected documents confirm CVE-2020-6498 is among multiple Chrome vulnerabilities listed in Debian se...

CVE-2020-8659

CVE-2020-8659 affects the Envoy proxy used in Photon OS (Envoy package). The vulnerability causes memory exhaustion when proxying HTTP/1.1 requests or responses with many tiny chunks. Photon OS advisories PHSA-2020-1.0-0290 and PHSA-2020-2.0-0229 indicate updates to the envoy package are availabl...

CVE-2021-21845

GPAC Project on Advanced Content library (GPAC) version 1.0.1 contains multiple CVE-2021-21845 family integer overflow flaws in MPEG-4 decoding. Specifically, the issue is triggered in the stsc decoder (and related atoms/FOURCC paths) where unchecked arithmetic can overflow and allocate/offset me...

CVE-2021-27345

CVE-2021-27345 relates to lrzip (Irzip) 0.631, where a null pointer dereference in ucompthread() in stream.c can cause a denial of service via a crafted ZIP file. The vulnerability affects lrzip packages across multiple distros; fixed versions are provided in Debian security advisories (e.g., DSA...

CVE-2021-45087

CVE-2021-45087 affects GNOME Web (Epiphany). The vulnerability arises when using View Source mode or Reader mode, allowing an XSS payload via the page title. Affected component is Epiphany/GNOME Web; root cause is improper handling in those modes leading to script execution. Impact is XSS under t...

CVE-2021-45342

Summary: CVE-2021-45342 is a buffer overflow in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older that enables Remote Code Execution via a crafted JWW document. Affected versions: LibreCAD 2.2.0-rc3 and older (per multiple advisories). Impact: attacker can achieve RCE through a cr...

CVE-2022-0545

Blender is affected by CVE-2022-0545 due to an integer overflow in the processing of loaded 2D images, causing a write-what-where condition and an out-of-bounds read that can leak data or enable code execution within the Blender process. Affected releases include Blender versions prior to 2.83.19...

CVE-2022-23804

KiCad KiCad EDA 6.0.1 (Gerber Viewer/Excellon parsers) and the master commit de006fc010 are affected by CVE-2022-23804, a stack-based buffer overflow in the ReadIJCoord parser that could allow code execution via a specially crafted Gerber/Excellon file. Affected component/file: Gerber Viewer/Exce...

CVE-2022-24884

CVE-2022-24884 affects ecdsautils, the ECDSA utilities library and CLI. The flaw is in ecdsautils’ signature verification: ecdsa_verify_[prepare_]legacy() does not reject zero-valued r or s, causing signatures comprised entirely of zeros to be deemed valid. Consequently, forged signatures can byp...

CVE-2022-43243

Libde265 v1.0.8 contains a heap-buffer-overflow via ff_hevc_put_weighted_pred_avg_8_sse in sse-motion.cc, enabling Denial of Service with a crafted video file. Multiple connected advisories document this CVE and recommend upgrading libde265 to fixed releases (e.g., through Debian/DLA-3280-1, Clou...

CVE-2022-47655

CVE-2022-47655 affects libde265 1.0.9, vulnerable to a buffer overflow in the template-instantiated function put_qpel_fallback. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, no privileges required, user interaction required, and impact on confidentiality, integrity, and availability. ...

CVE-2023-31490

CVE-2023-31490 affects FRRouting (FRR) bgpd, where missing length checks in bgp_attr_psid_sub() can allow a remote attacker to trigger a denial of service. The vulnerability is documented across multiple advisories (e.g., TencentOS/Tenable listings) and is associated with FRR releases including v...

CVE-2023-52882

In CVE-2023-52882, the Linux kernel vulnerability affects clk: sunxi-ng: h6 where CPUX reparenting during PLL CPUX rate change can cause instability, system crashes, or undefined behavior when CPUX clock changes while running. The issue was resolved by preventing instability when reparenting to a...

CVE-2024-36916

The CVE-2024-36916 issue is in Linux kernel’s blk-iocost code where iocg->delay can be shifted right by too large a value, triggering UBSAN shift-out-of-bounds: shift exponent 64 is too large for 64-bit u64. Exploitation details are not provided in the documents. The remediation described in t...

CVE-2025-25472

CVE-2025-25472 concerns DCMTK. Connected sources confirm a buffer overflow in DCMTK git master v3.6.9+ DEV that allows an attacker to cause a Denial of Service via a crafted DCM file. The vulnerability is described across multiple advisories as affecting DCMTK and is referenced in Debian LTS/DLA-...

CVE-2025-37912

CVE-2025-37912 affects the Linux kernel ICE driver. The root cause is a missing null pointer check on the value returned by ice_get_vf_vsi(), which could lead to using a NULL VSI pointer in ice_vc_add_fdir_fltr(). The fix, described in commit baeb705fd6a7 ("ice: always check VF VSI pointer values...

CVE-2025-37964

CVE-2025-37964 relates to the Linux kernel x86/mm TLB handling. The issue is a bug in should_flush_tlb() that can suppress TLB flushes in a narrow window between load_new_mm_cr3() and writing the new mm state into loaded_mm, risking missed TLB flushes during address space switch. The fix widens t...

CVE-2025-38211

In the Linux kernel, CVE-2025-38211 affects the RDMA/iwcm path where use-after-free of cm_id_private work objects can occur during cm_id destruction. The root cause involved cm_id resource management and last-reference handling; prior fixes flushed pending works at cm_id destruction, but a remain...

CVE-2025-38386

CVE-2025-38386 : In the Linux kernel, ACPICA could crash due to a use-after-free when a platform firmware update increases the number of AML method parameters but does not update all callers. The fix makes ACPICA refuse to evaluate a method if the caller passes fewer arguments than expected, prev...

CVE-2025-38488

The CVE-2025-38488 issue affects the Linux kernel SMB client (smb: client) where use-after-free occurs in crypt_message() when hardware crypto accelerators perform asynchronous AEAD operations. The root cause was the removal of asynchronous crypto handling (assuming synchronous crypto), causing c...

CVE-2007-1320

CVE-2007-1320 describes a heap-based buffer overflow in the Cirrus VGA emulator (Cirrus_vga.c) of QEMU (as used in Xen and related setups). The vulnerability arises when the code attempts to mark non-existent regions as dirty (bitblt path), enabling local users to potentially execute arbitrary co...

CVE-2007-4657

CVE-2007-4657 in PHP affects both PHP 4 (before 4.4.8) and PHP 5 (before 5.2.4). The issue arises from multiple integer overflows when a large len value is passed to the functions and strspn/strcspn, leading to an out-of-bounds read and potential information disclosure or denial of service (threa...

CVE-2009-5046

CVE-2009-5046 affects Jetty (JSP Dump and Session Dump Servlets) with XSS due to improper validation in the JSP Dump and Session Dump Servlets, observed in Jetty versions before 6.1.22. The vulnerability enables cross-site scripting that can steal cookie-based credentials when a page using the af...

CVE-2011-0480

CVE-2011-0480 involves FFmpeg’s Vorbis decoder (libavcodec/vorbis_dec.c) with multiple buffer overflows that can be triggered by a crafted WebM file, leading to memory corruption and possible denial of service or other impact. The vulnerability affects FFmpeg as used in browsers (e.g., Chrome pri...

CVE-2012-1974

CVE-2012-1974 is a use-after-free vulnerability in gfxTextRun::CanBreakLineBefore affecting Mozilla Firefox (and related apps like Thunderbird/SeaMonkey) prior to version 15.0, with remote code execution or a denial of service via unspecified vectors. The connected Nessus entries confirm the CVE ...

CVE-2013-2857

CVE-2013-2857 is a use-after-free in Google Chrome/Chromium prior to 27.0.1453.110, related to image handling. The vulnerability could allow a remote attacker to cause a denial of service or potentially other unspecified impacts. Public advisories (e.g., Debian security notices) confirm multiple ...

CVE-2014-3640

CVE-2014-3640 affects QEMU, where the sosendto function in slirp/udp.c before 2.1.2 is vulnerable. A local user can trigger a NULL pointer dereference by sending a UDP packet with source port/address 0, causing a denial of service via uninitialized socket access. Affected product: QEMU (slirp UDP...

CVE-2015-1242

CVE-2015-1242 describes a type-confusion vulnerability in Google V8’s ReduceTransitionElementsKind (hydrogen-check-elimination.cc) exploited via crafted JavaScript, affecting Google Chrome before 42.0.2311.90. It is triggered by the check-elimination optimization and can lead to denial of service...

CVE-2016-1672

CVE-2016-1672 affects Google Chrome up to version 51.0.2704.63, where the ModuleSystem::RequireForJsInner function in extension bindings mishandles properties, enabling remote cross-origin bypass via unspecified vectors. Public advisories and vendor fixes (e.g., Chromium 51.0.2704.63) address the...

CVE-2016-1677

CVE-2016-1677 refers to a type confusion in the V8 JavaScript engine used by Google Chrome/Chromium prior to version 51.0.2704.63. The flaw could allow a remote attacker to obtain sensitive information by calling decodeURI, via the affected V8 bindings, as part of the Chromium/Chrome stack. The c...