CVE-2025-38146

The CVE CVE-2025-38146 concerns the Linux kernel net/openvswitch MPLS parsing dead loop when handling MPLS stacks, where the label count may wrap and an invalid index (-1) can occur in key_extract_l3l4, causing a potential soft lockup/CPU stall. Affected: Linux kernel with openvswitch MPLS flow p...

CVE-2025-38362

The CVE-2025-38362 issue is in the Linux kernel’s DRM AMD display path. The function get_first_active_display() could return NULL when the display list is empty, and mod_hdcp_hdcp1_enable_encryption() did not check this return value, risking a NULL pointer dereference in mod_hdcp_hdcp2_enable_enc...

CVE-2025-38393

CVE-2025-38393 is a Linux kernel race condition in NFSv4/pNFS wake logic for NFS_LAYOUT_DRAIN in pnfs_update_layout(). The issue occurs when a waiter and waker race, causing writeback/page lock hang; a barrier-based fix is applied. Public advisories/DB entries confirm the fix across multiple kern...

CVE-2004-0888

CVE-2004-0888 : Multiple integer overflows in xpdf (v2.0/v3.0) and in code that uses xpdf (e.g., CUPS, gpdf, kdegraphics) allow remote attackers to crash services and possibly execute arbitrary code. Some reports note 64-bit builds can exacerbate the overflow (pdftops/filter path). Remediation is...

CVE-2005-0005

CVE-2005-0005 is a heap-based buffer overflow in ImageMagick’s psd.c that affects ImageMagick 6.1.0, 6.1.7, and possibly earlier versions. An attacker can trigger remote code execution by supplying a PSD image with a large number of layers. Connected documents confirm the vulnerability and link t...

CVE-2005-3625

CVE-2005-3625 is confirmed to affect Xpdf and related tools (gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, etc.). The issue is a denial-of-service in PDF stream handling where streams that end prematurely can cause an infinite loop, demonstrated for the CCITTFaxDecode and DCTDecode s...

CVE-2006-6503

CVE-2006-6503: Affected Mozilla Firefox 2.x before 2.0.0.1, Mozilla Firefox 1.5.x before 1.5.0.9, Mozilla Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7. The issue allows bypassing cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI. ...

CVE-2009-0322

CVE-2009-0322 affects the Linux kernel Dell RBU (Remote BIOS Update) driver: reading zero bytes from image_type or packet_size under /sys/devices/platform/dell_rbu/ can cause a local DoS (system crash). Concrete references in connected advisories show affected kernels include 2.6.27.x (before 2.6...

CVE-2010-4079

CVE-2010-4079 affects the Linux kernel ivtvfb driver (ivtvfb_ioctl in drivers/media/video/ivtv/ivtvfb.c) prior to 2.6.36-rc8. The root cause is failure to initialize a structure member, enabling local users to leak information from kernel stack memory via the FBIOGET_VBLANK ioctl. Affected versio...

CVE-2011-1526

The CVE-2011-1526 issue affects MIT Kerberos Version 5 Applications (krb5-appl) ftpd.c: it does not check the krb5_setegid return value, enabling remote authenticated users to bypass group restrictions and perform create/overwrite/delete/read of files via FTP. The vulnerability is reported in con...

CVE-2011-3632

CVE-2011-3632 affects the hardlink utility prior to version 0.1.2, where operations on full filesystem object path names enable local attackers to perform symlink attacks. The provided documents do not specify affected distributions, exact vulnerable files, or a confirmed patch/mitigation. No exp...

CVE-2011-3919

CVE-2011-3919 is a heap-based buffer overflow in libxml2 used by Chrome up to v16.0.912.75. The flaw occurs when decoding entity references with long names, potentially crashing the application or allowing arbitrary code execution. Public advisories across multiple vendors (Red Hat/CentOS RHSA-20...

CVE-2011-4350

Affected software: Yaws web server (1.91; and v1.9.1 or less per sources). Issue: directory traversal in how certain URLs are processed, enabling a remote authenticated user to obtain content of arbitrary local files via specially crafted URL requests. Concretely documented in CVE-2011-4350 acros...

CVE-2012-6656

CVE-2012-6656 affects GNU C Library (glibc) iconvdata/ibm930.c, where iconv converting IBM930 to UTF-8 can trigger an out-of-bounds read by a multibyte value 0xffff. This is a context-dependent denial-of-service vulnerability. The description indicates the issue exists in glibc before version 2.1...

CVE-2015-2756

CVE-2015-2756 affects QEMU as used in Xen 3.3.x–4.5.x and describes that local HVM guests can disable memory or I/O decoding for a PCI Express device, causing a denial of service via an Unsupported Request (UR) response and potential host crash. The Debian DLA-479-1 advisory notes Xen 4.1.x serie...

CVE-2015-3332

CVE-2015-3332 affects the Linux kernel TCP Fast Open code before 3.18, where a count is not correctly maintained, allowing a local user to crash the system (DoS) via the Fast Open feature. Demonstrated on certain 3.10.x–3.16.x kernels by visiting chrome://flags/#enable-tcp-fast-open. The issue is...

CVE-2015-3438

CVE-2015-3438 affects WordPress versions before 4.1.2. The issue arises when MySQL runs without strict mode, allowing remote attackers to inject arbitrary web script or HTML via a crafted character in a comment that reaches the database layer (two vectors: a four-byte UTF-8 character or an invali...

CVE-2015-3440

CVE-2015-3440 affects WordPress prior to 4.2.1 via an XSS in wp-includes/wp-db.php, where a long comment could be stored improperly due to MySQL TEXT type limitations. The Debian advisory notes that this is related to an incomplete fix for CVE-2015-3440 and references later revisions such as 4.2....

CVE-2016-2150

CVE-2016-2150 affects SPICE: a memory access flaw in handling crafted primary surface parameters allows a local guest OS user to read from or write to host memory. Root cause: improper handling of primary surface parameters in SPICE. Impact: confidentiality and integrity of host memory are HIGH, ...

CVE-2016-2376

CVE-2016-2376 — Pidgin MXIT buffer overflow : A vulnerability in the MXIT protocol handling in Pidgin could be triggered by specially crafted MXIT data from a server, potentially causing arbitrary code execution due to a buffer overflow. The initial description notes an invalid packet size as the...

CVE-2016-2806

CVE-2016-2806 affects Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1. The issue is described as memory safety vulnerabilities in the browser engine that could lead to memory corruption, a denial of service, or possibly arbitrary code execution via unknown vectors. The connected sour...

CVE-2016-2851

CVE-2016-2851 affects libotr (Off-the-Record Messaging Library). The description and connected documents confirm an integer overflow in libotr’s proto.c on 64-bit platforms, leading to a heap-based overflow when processing large OTR messages. This can cause a denial of service (memory corruption ...

CVE-2016-4037

CVE-2016-4037 affects QEMU, specifically the USB EHCI emulation (ehci_advance_state in hw/usb/hcd-ehci.c). It enables a local privileged guest OS user to cause a denial of service via a circular split isochronous transfer descriptor list (siTD), an issue related to CVE-2015-8558. The description ...

CVE-2017-11714

CVE-2017-11714 is a vulnerability in Artifex Ghostscript 9.21 where psi/ztoken.c mishandles references to the scanner state structure, allowing a remote attacker to trigger a denial of service (application crash) or potentially other impact via a crafted PostScript document. The root cause involv...

CVE-2017-12873

SimpleSAMLphp 1.7.0–1.14.10 is affected by CVE-2017-12873 due to an incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured. This could allow attackers to obtain sensitive information or gain unauthorized access, depending on deployment specifics. The vulnerability...

CVE-2017-14976

CVE-2017-14976 affects Poppler 0.59.0 via FoFiType1C::convertToType0, which may perform a heap-based buffer over-read when encountering an out-of-bounds font dictionary index, enabling denial of service. Public fixes are shown in openSUSE/SUSE advisories (e.g., openSUSE-2018-648) that list CVE-20...

CVE-2017-15372

CVE-2017-15372 affects SoX 14.4.2: a stack-based buffer overflow in lsx_ms_adpcm_block_expand_i() in adpcm.c can be triggered by crafted input to cause a denial of service during audio file conversion. Public documents enumerate this and related SoX CVEs across RHEL5–7 as unpatched/vulnerable in ...

CVE-2017-15390

Affected software: Google Chrome/Chromium Omnibox component. Vulnerability: insufficient policy enforcement allows domain spoofing via IDN homographs in crafted domain names when using Chromium/Chrome before version 62.0.3202.62. Root cause: Omnibox URL handling failure enabling spoofed display o...

CVE-2017-20002

CVE-2017-20002 affects the Debian shadow package prior to 1:4.5-1: it incorrectly marks pts/0 and pts/1 as physical terminals in /etc/securetty, enabling local privilege escalation even when users connect non-physically (e.g., SSH). The issue is resolved in the Debian LTS advisories by applying t...

CVE-2017-2924

The CVE-2017-2924 vulnerability affects FreeXL 1.0.3, with a heap-based buffer overflow in the read_legacy_biff function. A specially crafted XLS file can trigger memory corruption, leading to remote code execution. Exploitation involves sending a malicious XLS to the vulnerable library. Public r...

CVE-2017-5194

CVE-2017-5194 is a use-after-free vulnerability in Irssi before 0.8.21 triggered by an invalid nick message, allowing remote attackers to crash the application (denial of service). Multiple connected advisories confirm the flaw, its remote exploitability, and that the fix is to upgrade to Irssi 0...

CVE-2017-8343

CVE-2017-8343 is rejected; not used; this entry does not represent an active vulnerability.

CVE-2017-9611

CVE-2017-9611 – Ghostscript GhostXPS 9.21 is affected. The vulnerability is in the Ins_MIRP function of base/ttinterp.c within Artifex Ghostscript GhostXPS 9.21, which allows remote attackers to cause a denial of service via a crafted document. The impact described is a heap-based buffer over-rea...

CVE-2017-9612

CVE-2017-9612 : The vulnerability is in Artifex Ghostscript GhostXPS 9.21. The Ins_IP function in base/ttinterp.c can be triggered by a crafted document to cause a denial of service via a use-after-free, potentially crashing the application and causing a partial impact to integrity/availability a...

CVE-2018-10001

CVE-2018-10001 affects FFmpeg prior to and including 3.4.2, where the function decode_init in libavcodec/utvideodec.c can be abused by a crafted AVI file to trigger a denial of service via an out-of-bounds read. The provided documents consistently describe DoS potential but do not include exploit...

CVE-2018-16738

CVE-2018-16738 affects tinc 1.0.30–1.0.34, which have a broken authentication protocol with only partial mitigation; the issue is fixed in 1.1. The NVD notes a CVSS v3.1 base score of 3.7 (LOW) with network attack vector and high attack complexity, no privileges required, and no impact on confide...

CVE-2018-5248

CVE-2018-5248 is a vulnerability in ImageMagick 7.0.7-17 Q16 where a heap-based buffer over-read occurs in the ReadSIXELImage function (sixel_decode path) of the sixel coder. Documents indicate this could lead to a denial of service or, in some advisories, arbitrary code execution. Affected advis...

CVE-2018-5378

CVE-2018-5378 affects the Quagga BGP daemon (bgpd) before version 1.2.3. The vulnerability arises from insufficient bounds checking of data in a NOTIFY when an attribute length is invalid, allowing arbitrary data from the bgpd process to be sent to a peer and/or causing bgpd to crash. Relevant re...

CVE-2018-9846

CVE-2018-9846 affects Roundcube versions 1.2.0–1.3.5 with the archive plugin enabled. The root cause is improper sanitization of the user-controlled _uid parameter in archive.php (request _task=mail&_mbox=INBOX&_action=plugin.move2archive), allowing an MX/IMAP command injection by appending comma...

CVE-2019-19830

CVE-2019-19830 affects SPIP 3.2.x before 3.2.7, where the medias plugin (core /plugins/medias) allows a remote authenticated author to inject content into the database due to the underlying vulnerability in the media handling. The issue is a database injection risk that can impact data integrity....

CVE-2020-36478

CVE-2020-36478 affects Mbed TLS up to versions preceding 2.25.0 (and the LTS lines 2.16.9 and 2.7.18). The issue: a NULL algorithm parameters entry can look identical to an empty REAL array, causing a certificate to be treated as valid even when parameters do not match. If parameters do not match...

CVE-2020-3812

CVE-2020-3812 : In netqmail 1.06 (qmail-verify), a local attacker can determine existence of files/directories anywhere in the filesystem because qmail-verify runs as root and does not drop privileges before testing; this enables information disclosure. Debian/DLA-2234 fixes the issues in netqmai...

CVE-2021-26313

CVE-2021-26313 describes a speculative code store bypass affecting AMD CPUs where speculative execution of overwritten instructions may leak data. AMD’s bulletin AMD-SB-1003 maps the CVE to all currently supported CPU products, noting potential data leakage and recommending mitigations, including...

CVE-2021-36052

The CVE-2021-36052 issue concerns Exempi (XMP Toolkit) and affects version 2020.1 and earlier, with an out-of-bounds memory access that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (e.g., opening a crafted file). Multiple connecte...

CVE-2022-33748

CVE-2022-33748 corresponds to a Xen/XenServer vulnerability where a missing cleanup call on an error path can cause lock order inversion during transitive grant copy handling (XSA-226). This can lead to nested locks acquired in opposite order between two cooperating guests, potentially causing CP...

CVE-2022-42317

CVE-2022-42317 concerns Xenstore/xenstored memory exhaustion. The public description details multiple local vect ors by malicious guests: issuing requests without reading responses (buffered responses), generating大量 watches, creating maximum-size nodes across many transactions, and accessing many...

CVE-2022-43241

CVE-2022-43241 affects Libde265 v1.0.8 and is described as an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in sse-motion.cc, enabling Denial of Service through a crafted video file. Technical details across connected docs confirm the vulnerability is tied to the H.265 libde265 implementation...

CVE-2023-28686

CVE-2023-28686 affects the Dino chat client prior to 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2. A crafted message can modify the user’s personal bookmark store, and may alter the display of group chats or force the victim to join a group chat, potentially leading to disclosure of sensitiv...

CVE-2023-39356

CVE-2023-39356: FreeRDP contains a missing offset validation in gdi_multi_opaque_rect. The boundary check for multi_opaque_rect->numRectangles is absent, enabling an Out-Of-Bounds Read that can crash the client. Documents specify this issue is addressed in versions 2.11.0 and 3.0.0-beta3. The ...

CVE-2024-35996

Technical details for CVE-2024-35996 are not provided in the supplied documents. The description summarizes kernel-mitigation changes, but there are no explicit affected products, versions, impacts, or fixes. Monitor vendor advisories for updates.