CVE-2016-1677

CVE-2016-1677 refers to a type confusion in the V8 JavaScript engine used by Google Chrome/Chromium prior to version 51.0.2704.63. The flaw could allow a remote attacker to obtain sensitive information by calling decodeURI, via the affected V8 bindings, as part of the Chromium/Chrome stack. The c...

CVE-2016-5728

CVE-2016-5728 is a local-privilege vulnerability in the Linux kernel MIC VOP driver (drivers/misc/mic/vop/vop_vringh.c). The race condition occurs in vop_ioctl where the driver performs two successive reads from user space to read a variable-length data structure, enabling a local user to either ...

CVE-2016-7044

The CVE-2016-7044 issue affects Irssi prior to 0.8.20 where the unformat_24bit_color function in the format parsing code, when compiled with true-color enabled, can be triggered by an incomplete 24bit color code to cause heap corruption and a remote denial of service. The public material ties thi...

CVE-2016-7072

CVE-2016-7072 affects PowerDNS Authoritative Server pre-3.4.11 and 4.0.2, enabling remote, unauthenticated denial of service by opening many TCP connections that can exhaust file descriptors and terminate the process. Multiple connected sources confirm the issue and indicate remediation: upgradin...

CVE-2017-12904

Newsbeuter is affected by CVE-2017-12904 in the bookmarking function (versions 0.7–2.9). A remote attacker could cause user‑assisted code execution by crafting an RSS item containing shell code in the title/URL. Remediation across advisories involves upgrading Newsbeuter to a newer release (e.g.,...

CVE-2017-13064

Technical details for CVE-2017-13064 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-14136

OpenCV 3.3 is affected by an out-of-bounds write in FillColorRow1 (utils.cpp) when reading images with cv::imread, linked to an incomplete fix for CVE-2017-12597. The connected advisory references this exact issue family and confirms the vulnerability class (out-of-bounds write) in the OpenCV ima...

CVE-2017-15238

Technical details for CVE-2017-15238 are not publicly provided in the connected documents. Monitor for updates in the sources; current data confirms a ReadOneJNGImage use-after-free condition in GraphicsMagick, but no specifics beyond the initial description are included here.

CVE-2017-15393

CVE-2017-15393 affects Chromium/Chromium-based browsers, describing an information disclosure (referrer leak) in the Devtools remote debugging feature prior to 62.0.3202.62. A remote attacker could obtain access to remote debugging functionality via a crafted HTML page, enabling potential exposur...

CVE-2017-17503

CVE-2017-17503 affects GraphicsMagick 1.3.26: ReadGRAYImage in coders/gray.c allows a heap-based buffer over-read via a crafted file. Connected advisories (USN-4248-1, Debian DSA-4321-1) document multiple GraphicsMagick flaws and require upgrading to fixed releases (e.g., Debian stretch fix to 1....

CVE-2017-18229

GraphicsMagick 1.3.26 is affected by an allocation failure in ReadTIFFImage (coders/tiff.c) that allows DoS via a crafted TIFF file because allocations for scanlines/strips/tiles aren’t properly bounded by file size. Public advisories (e.g., Debian DSA-4321-1) note patches/versions (e.g., 1.3.30+...

CVE-2017-5038

CVE-2017-5038 : Affected product is Google Chrome/Chromium prior to 57.0.2987.98. The vulnerability is a use-after-free in the GuestView component of Chrome/Chromium, leading to an out-of-bounds memory read via a crafted Chrome extension. Public documentation in connected sources confirms a fixed...

CVE-2017-5101

CVE-2017-5101 concerns Google Chrome’s Omnibox content spoofing vulnerability. The public description specifies an inappropriate Omnibox implementation that allows a remote attacker to spoof the Omnibox contents via a crafted HTML page on Chrome versions before 60.0.3112.78 (Linux, Windows, Mac)....

CVE-2017-5109

CVE-2017-5109 affects Chromium before version 60.0.3112.78, where a UI spoofing vulnerability was identified in the browser’s UI components (per Arch/Debian advisories). The issue is fixed in 60.0.3112.78 (upstream) with the Debian/Arch advisories confirming remediation. Affected product: Chromiu...

CVE-2017-5119

CVE-2017-5119 concerns the Skia component of Chromium. The initial description notes an uninitialized value in Skia on Chromium before 61.0.3163.79 (and Android 61.0.3163.81), enabling a remote attacker to read potentially sensitive process-memory data via a crafted HTML page (information disclos...

CVE-2017-6060

MuPDF 1.10a is affected by CVE-2017-6060: a stack-based buffer overflow in jstest_main.c (mujstest) that can be triggered by a crafted image. Public disclosures confirm the vulnerability exists in Artifex MuPDF and can lead to unspecified impact via remote craft, with exploit references documente...

CVE-2017-6298

CVE-2017-6298 affects ytnef/libytnef up to version 1.9.1, with multiple related issues including NULL pointer dereferences and heap/write errors in decoding winmail.dat attachments. Public docs show a core vulnerability pattern: NULL pointer dereference, out-of-bounds/heap-buffer issues from inco...

CVE-2017-6471

CVE-2017-6471 affects Wireshark 2.0.0–2.0.10 and 2.2.0–2.2.4. The vulnerability is in the WSP dissector, where an infinite loop can be triggered by crafted packets or malformed captures due to insufficient validation of the capability length. The root cause is an inadequate check in epan/dissecto...

CVE-2017-8345

CVE-2017-8345 is rejected and not used; this entry does not represent an active vulnerability.

CVE-2017-9216

CVE-2017-9216 affects libjbig2dec.a in Artifex jbig2dec 0.13 (as used by MuPDF and Ghostscript). The vulnerability is a NULL pointer dereference in the jbig2_huffman_get function of jbig2_huffman.c, which can cause a crash/segmentation fault when parsing an invalid/.jb2 file. Connected sources co...

CVE-2017-9406

In Poppler 0.54.0, CVE-2017-9406 is a memory-leak vulnerability in gmalloc (gmem.cc) that can cause a denial of service when processing a crafted PDF/file. The issue is triggered by failing clean-up of allocated memory, leading to DoS conditions as described in multiple sources. No public exploit...

CVE-2018-17204

Open vSwitch (OVS) 2.7.x–2.7.6 is affected by CVE-2018-17204 due to a logic error in parse_group_prop_ntr_selection_method within lib/ofp-util.c. During decoding of a group mod, the code validates the group type/command only after the full group mod is parsed, but the OpenFlow 1.5 decoder may use...

CVE-2018-19206

CVE-2018-19206 affects Roundcube Webmail: a cross‑site scripting vulnerability in how HTML attachments are parsed, via crafted content that can execute when an onload attribute is used in a BODY tag. Affected are Roundcube versions before 1.3.8 (and, per Debian advisories, prior patches and rela...

CVE-2018-1999010

CVE-2018-1999010 affects FFmpeg prior to commit cced03dd667a5df6df8fd40d8de0bff477ee02e8, which contains multiple out-of-array access vulnerabilities in the MMS protocol. The flaws can allow an attacker to read out-of-bounds data and appear exploitable via network connectivity. The issue is expli...

CVE-2018-5802

LibRaw contains an out-of-bounds read vulnerability in the kodak_radc_load_raw() function (internal/dcraw_common.cpp) due to a buf variable issue. This affects LibRaw versions prior to 0.18.7 and can lead to a crash. Remediation: upgrade LibRaw to version 0.18.7 or later (as specified in the CVE ...

CVE-2018-6097

CVE-2018-6097 describes an issue in Google Chrome for macOS where improper handling of asynchronous methods in the Fullscreen UI could allow a remote attacker to enter full screen without showing a warning via a crafted HTML page. The root cause is an incorrect handling of asynchronous fullscreen...

CVE-2018-7052

Irssi vulnerability CVE-2018-7052 affects Irssi prior to 1.0.7 and prior to 1.1.1, where the number of windows exceeding available space triggers a crash via a NULL pointer dereference (designated DoS). Public sources confirm this issue across multiple advisories; Debian/Mageia notes patches in c...

CVE-2019-12468

CVE-2019-12468 affects MediaWiki 1.27.0–1.32.1. The issue is an Incorrect Access Control vulnerability where directly POSTing to Special:ChangeEmail bypasses re-authentication, enabling potential account takeover. Connected advisories confirm the flaw and describe remediation in vendor packages: ...

CVE-2019-14464

CVE-2019-14464 is a heap-based overflow in MilkyTracker’s XMFile::read (MilkyTracker 1.02.00). Connected advisories confirm multiple mitigations across distros: Debian DLA-2292-1 fixes MilkyTracker with version 0.90.86+dfsg-2+deb9u1; Ubuntu USN-4499-1 addresses MilkyTracker vulnerabilities; Fedor...

CVE-2019-16221

CVE-2019-16221 refers to WordPress prior to 5.2.3, which is affected by a reflected XSS in the dashboard. The vulnerability allows an attacker to inject scripts via crafted input that is reflected in the admin interface, leading to potential credential theft or session hijack under certain condit...

CVE-2019-18848

CVE-2019-18848 affects the rubygem-json-jwt library for Ruby, where versions prior to 1.11.0 fail to enforce an element count when splitting a JWE string. This is documented across multiple advisories (Debian DLA-2390-1, openSUSE/SUSE advisories) indicating the issue and references to upgrading t...

CVE-2019-9706

CVE-2019-9706 affects Vixie Cron (Debian package cron) prior to the patched release 3.0pl1-133, where a force_rescan_user use-after-free can crash the daemon, enabling local denial of service. Public disclosures in Ubuntu/Debian advisories (USN USN-5259-2/3) and related OSSV/OpenVAS entries confi...

CVE-2020-36278

CVE-2020-36278 affects Leptonica up to version 1.79.x, with a heap-based buffer over-read in findNextBorderPixel (ccbord.c). Connected documents confirm Leptonica before 1.80.0 is vulnerable and that a fix was released in 1.80.0 (e.g., Debian/LTS advisory and Mageia update). Impact details in the...

CVE-2021-3405

CVE-2021-3405 affects libebml before 1.4.2. A heap overflow bug in EbmlString::ReadData and EbmlUnicodeString::ReadData is disclosed across multiple advisories (Gentoo GLSA, Debian DLA, Arch, Fedora). The vulnerability arises in libebml’s string data handling and can allow exploitation via crafte...

CVE-2021-3912

CVE-2021-3912 affects OctoRPKI: it loads an entire repository into memory and can unzip a gzip bomb in memory, enabling resource exhaustion and a crash. The vulnerability is described consistently across multiple feeds as a memory/CPU exhaustion issue triggered by oversized input or crafted archi...

CVE-2021-39371

CVE-2021-39371 is an XXE injection in PyWPS prior to 4.4.5, with OWSLib 0.24.1 possibly affected. The vulnerability allows an attacker to view files on the application server filesystem by supplying a path to an XML external entity. The connected advisories indicate remediation by upgrading PyWPS...

CVE-2021-40401

CVE-2021-40401 affects Gerbv (RS-274X aperture definition tokenization) with a use-after-free in 2.7.0 (and forks) that an attacker can trigger via a crafted Gerber file to achieve code execution. Connected advisories confirm additional related CVEs (CVE-2021-40403 etc.) and describe the same fam...

CVE-2022-1922

CVE-2022-1922 affects gstreamer-plugins-good (MKV demuxing via zlib). Affected component: matroskademux, specifically gst_matroska_decompress_data, where an integer overflow could lead to a segfault or a heap overwrite depending on libc/OS behavior. This is a potential local, low-complexity issue...

CVE-2022-23803

CVE-2022-23803 is a stack-based buffer overflow in KiCad EDA’s Gerber Viewer/Excellon ReadXYCoord parsing (and related ReadIJCoord, GCodeNumber, DCodeNumber in the family) that could allow code execution when opening specially crafted Gerber/Excellon files. Public sources in connected docs consis...

CVE-2022-27114

CVE-2022-27114 affects htmldoc 1.9.16. In image_load_jpeg (image.cxx), malloc is used for img->width/height in a way that can overflow, causing the allocated heap block to be smaller than expected and leading to a buffer overflow in jpeg_read_scanlines. Connected sources corroborate a memory/h...

CVE-2022-39177

CVE-2022-39177 affects BlueZ before 5.59. The vulnerability allows physically proximate attackers to cause a denial of service by sending malformed/invalid capabilities that are processed in profiles/audio/avdtp.c. Connected sources (Astra Linux bulletin and Debian/Debian LTS/DLA-3879) confirm Bl...

CVE-2022-42318

CVE-2022-42318 is a Xenstore-related vulnerability in the Xen hypervisor where a malicious guest can cause xenstored to allocate excessive memory, resulting in a Denial of Service. The public description lists multiple attack vectors that trigger large memory usage: issuing new requests without r...

CVE-2024-47619

CVE-2024-47619 — syslog-ng TLS wildcard bug Affected product: syslog-ng (log daemon). Prior to version 4.8.2, the tls_wildcard_match() function can erroneously match on certificates like foo..bar and accept partial wildcards such as foo.a c.bar, which glib matches but should be considered invalid...

CVE-2025-37972

CVE-2025-37972 — The Linux kernel vulnerability in the mtk-pmic-keys driver can cause a NULL pointer dereference in mtk_pmic_keys_probe when the device-tree button node is absent (e.g., left floating). The fix uses the generic regs structure defined for all platforms and allows the key register t...

CVE-2025-38084

CVE-2025-38084 affects the Linux kernel mm/hugetlb subsystem. Description: unshare of hugetlb page tables during VMA split occurs too early (before VMA/rmap locks), enabling racing page faults and rmap walks to share page tables before split. The fix: call hugetlb unshare logic from __split_vma()...

CVE-2025-38320

CVE-2025-38320 affects the Linux kernel on arm64/ptrace, describing a stack-out-of-bounds read in regs_get_kernel_stack_nth() detected by KASAN. The issue is illustrated by a long kernel trace showing a read of size 8 at a stack address belonging to task 1.sh/2550, with the buggy frame located in...

CVE-2007-3798

CVE-2007-3798 affects tcpdump’s BGP dissector: an integer overflow in print-bgp.c in tcpdump 3.9.6 and earlier allows remote code execution via crafted BGP TLVs. Impact: arbitrary code execution with the pcap user’s privileges when processing BGP packets. Remediation is via updated tcpdump packag...

CVE-2010-2963

CVE-2010-2963 affects the Linux kernel’s Video4Linux (V4L) implementation on x86_64, where a flaw in the v4l2-compat ioctl32 code fails to validate the destination of a memory copy, enabling a local user to write arbitrary kernel memory via VIDIOCSTUNER on a /dev/video device followed by VIDIOCSM...

CVE-2012-0259

CVE-2012-0259 affects ImageMagick where the GetEXIFProperty function (magick/property.c) is vulnerable when processing JPEG EXIF XResolution tags. In ImageMagick versions before 6.7.6-3, a zero value in the component count can trigger an out-of-bounds read, leading to a denial of service (crash)....

CVE-2013-0782

CVE-2013-0782 is a heap-based buffer overflow in Mozilla’s nsSaveAsCharset::DoCharsetConversion that affects Firefox before 19.0, ESR 17.x before 17.0.3, Thunderbird before 17.0.3, and SeaMonkey before 2.16. The connected documents confirm this vulnerability and show affected components include F...