CVE-2017-15416

CVE-2017-15416 describes a heap-based out-of-bounds read/overflow in Chrome’s Blob API that could allow remote exploitation via a crafted HTML page, triggering heap corruption. Affected product: Google Chrome (Blink) prior to 63.0.3239.84. Root cause: out-of-bounds read in Blob API handling. Impa...

CVE-2017-16652

CVE-2017-16652 affects Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. The issue resides in DefaultAuthenticationSuccessHandler and DefaultAuthenticationFailureHandler, which take the content of the _target_path parameter to generate a redirect but ...

CVE-2017-2839

CVE-2017-2839 affects FreeRDP 2.0.0-beta1+android11. A vulnerability in the handling of challenge packets can cause the program to terminate, leading to a denial of service. An attacker could exploit this over the network, potentially compromising the server or performing a man-in-the-middle atta...

CVE-2017-5095

CVE-2017-5095 corresponds to an out-of-bounds write in the pdfium library used by Chromium/Chrome. The Debian advisory links it to chromium-browser and notes fixes in version 60.0.3112.78-1~deb9u1 for stretch (and newer for sid). The Debian entry explicitly lists CVE-2017-5095 among multiple CVEs...

CVE-2017-5114

CVE-2017-5114 affects chromium-browser via an improper use of partition alloc in PDFium, enabling memory corruption through a crafted PDF. The Debian advisories note multiple Chromium CVEs (including 5114) and state fixes are available in the Chromium package by version 61.0.3163.100-1~deb9u1 for...

CVE-2017-6300

CVE-2017-6300 affects ytnef prior to 1.9.1. Root cause: a Buffer Overflow in the version field within lib/tnef-types.h. Impacted component is the TNEF decoding library used for Windows Outlook winmail.dat attachments; vulnerability could lead to partial confidentiality/integrity/availability impa...

CVE-2017-8086

CVE-2017-8086: In QEMU, a memory leak in v9fs_list_xattr (hw/9pfs/9p-xattr.c) can be triggered by the orig_value path, allowing local privileged guest users to cause denial of service via memory consumption. Public metrics show CVSSv2/3 for this issue (4.9, 6.5). The connected advisories (e.g., D...

CVE-2017-9214

Summary: CVE-2017-9214 affects Open vSwitch (OvS) 2.7.0 and is due to a buffer over-read caused by an unsigned integer underflow in the function ofputil_pull_queue_get_config_reply10 while parsing OFPT_QUEUE_GET_CONFIG_REPLY (OFP 1.0). Impact (as described): Buffer over-read with potential denial...

CVE-2017-9408

CVE-2017-9408 affects Poppler 0.54.0. The vulnerability is a memory leak in the function Object::initArray (Object.cc) that can enable a denial-of-service when processing a crafted file. The connected Nessus/Red Hat EulerOS advisories list this CVE among Poppler issues in 0.54.0 and related versi...

CVE-2017-9739

CVE-2017-9739: In Artifex Ghostscript GhostXPS 9.21, the Ins_JMPR function in base/ttinterp.c allows remote attackers to cause a denial of service via a crafted document, due to a heap-based buffer over-read. This is the concrete root cause and impact provided in connected documents; no further d...

CVE-2019-11025

CVE-2019-11025 affects Cacti prior to 1.2.3; the issue is an XSS in the SNMP Options printed value in the View poller cache due to lack of escaping in utilities.php. Impact is cross-site scripting; exploitation is possible via printing unescaped SNMP community strings. Mitigation: upgrade to a fi...

CVE-2019-17345

CVE-2019-17345 affects the Xen hypervisor (versions 4.8.x–4.11.x) and concerns mishandling of failed IOMMU operations in x86 PV guest cleanup, leading to a denial of service. Public advisories indicate fixes are provided via Xen updates in various distributions: e.g., Debian DSA-4602-1 (stretch/b...

CVE-2021-30164

CVE-2021-30164 affects Redmine's Issues API authorization, allowing bypass of add_issue_notes permission. Affected: Redmine < 4.0.8 and 4.1.x

CVE-2021-3842

CVE-2021-3842 affects the Python NLTK package; the vulnerability is an Inefficient Regular Expression Complexity (REDoS) in certain RegexpTaggers, leading to potential denial of service. Exposed components: nltk/nltk (regex processing). Public sources assign a high severity (CVSS v3.1 base 7.5; i...

CVE-2022-34680

CVE-2022-34680 affects the NVIDIA GPU Display Driver for Linux, specifically the kernel mode layer handler where an integer truncation can cause an out-of-bounds read, potentially leading to a denial of service. The vulnerability is documented across multiple sources (NVD entry and Debian securit...

CVE-2022-38266

CVE-2022-38266 affects Leptonica’s library (v1.79.0) and can cause a DoS via a crafted JPEG, due to an arithmetic exception. Multiple connected sources (Mageia advisory MGASA-2022-0472 and Gentoo GLSA-202312-01) confirm Leptonica vulnerability and recommend upgrading to a newer Leptonica release ...

CVE-2022-42324

CVE-2022-42324 details a 32-bit OCaml truncation issue in Oxenstored within the Xen/Xenstore/Xenbus stack. The Xenbus library casts a C uint32_t from the ring directly to an OCaml integer; on 64-bit OCaml this is fine, but on 32-bit builds the value is truncated, causing unsigned/signed confusion...

CVE-2023-2898

CVE-2023-2898 is a Linux kernel vulnerability: a null-pointer dereference in f2fs_write_end_io (fs/f2fs/data.c) can be triggered by a local, privileged user to cause a denial of service. Public documentation confirms this flaw and ties it to the f2fs filesystem on the Linux kernel, with advisorie...

CVE-2025-37940

Technical details about CVE-2025-37940 are not provided in the supplied documents. Monitor for updates from vendors/advisories for affected products, versions, and fixes.

CVE-2025-38024

CVE-2025-38024 pertains to the Linux kernel RDMA/rxe path. The issue is a slab-use-after-free Read in rxe_queue_cleanup, triggered when rxe_cq_from_init fails during CQ creation and the subsequent rxe_cleanup is responsible for freeing resources. Some memory has already been freed in rxe_cq_from_...

CVE-2025-38147

Technical details about CVE-2025-38147 (affected software, impact, exploitability, and fix specifics) are not publicly provided in the supplied documents. Please monitor for updates from vendors and security bulletins.

CVE-2025-38165

The CVE-2025-38165 vulnerability affects the Linux kernel’s bpf/sockmap path, causing a kernel panic when skb_linearize() is called. The root cause is a race-related interaction between backlog skb handling and skb release in the recvmsg path, previously mitigated by skb_get() in the backlog, whi...

CVE-2025-38230

CVE-2025-38230 concerns the Linux kernel’s JFS subsystem. The issue arises from not validating AG parameters in dbMount(), allowing corrupted metadata to reach dbAllocAG and cause crashes. A UBSAN shift-out-of-bounds occurs in fs/jfs/jfs_dmap.c:1400 during dbAllocAG, as demonstrated by the trace ...

CVE-2025-38331

CVE-2025-38331 concerns the Linux kernel net: ethernet: cortina with TOE/TSO offload. The issue arises from coupling TOE and segmentation: either both TOE and TSO are active or neither; disabling TOE can destabilize the hardware, leading to lockups/crashes under load. A fix/patched state exists i...

CVE-2025-38332

CVE-2025-38332 (Linux kernel) affects the lpfc SCSI path where BIOSVersion handling could panic due to a misused strlcat/FORTIFY check. The root cause is improper assumptions about buffer sizes, leading to a likely false positive overflow check, and the fix replaces the problematic sequence with ...

CVE-2025-38336

The CVE is a Linux kernel issue (CVE-2025-38336) affecting ata: pata_via when using ATAPI devices on VT6415/VT6330. The vulnerability stems from a hardware bug in the VIA controller that can cause a hard hang of the system during ATAPI DMAs, with potential boot-time failure depending on the attac...

CVE-2025-38365

The CVE-2025-38365 entry documents a race in btrfs where a rename and directory logging may interfere during crash/power loss, causing log replay to delete the renamed file if the system reboots before the new link is inserted. The root cause is a window where the log does not reflect the new nam...

CVE-2025-38377

CVE-2025-38377 : Linux kernel vulnerability in rose_rt_device_down() can cause use-after-free by corrupting the neighbour loop (loop bound altered and index increment after removal). A reverse-iteration fix with a fixed loop bound was applied to ensure all entries are examined and removals do not...

CVE-2025-38443

CVE-2025-38443 affects the Linux kernel (nbd subsystem). A use-after-free occurs in the nbd_genl_connect() error path when nbd_start_device() is called but cleanup continues to use nbd->config, leading to freeing of memory in recv_work. The issue is triggered during certain error paths after d...

CVE-2025-38468

CVE-2025-38468 in the Linux kernel affects the net/sched path where htb_lookup_leaf may trigger BUG_ON when handling an empty red-black tree during HTB dequeue. The described stack shows a sequence ending with a BUG_ON in htb_lookup_leaf, which is resolved by returning NULL from htb_lookup_leaf (...

CVE-2002-0184

The CVE-2002-0184 entry describes a local privilege-escalation in sudo prior to version 1.6.6 due to an off-by-one/doorknob in the heap-based overflow during prompt ( -p ) handling. The flaw is triggered by special characters in the -p prompt, which are not properly expanded, allowing a local use...

CVE-2008-4061

CVE-2008-4061: An integer overflow in the MathML component of Mozilla Firefox can be triggered by an mtd element with a large rowspan value. Affects Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12. Impact: remote memory corruption, denial of ...

CVE-2009-0385

Summary (CVE-2009-0385): FFmpeg’s fourxm demuxer contains an integer signedness error in libavformat/4xm.c (function fourxm_read_header). Before revision 16846, this allows a remote attacker to craft a malformed 4X movie file with a large current_track value, triggering a NULL pointer dereference...

CVE-2011-2924

CVE-2011-2924 affects the foomatic-rip filter (v4.0.12 and earlier). The flaw arises from insecure temporary file handling when rendering PostScript data in debug mode, enabling a local attacker to perform symlink attacks to overwrite arbitrary files accessible to the user running the foomatic-ri...

CVE-2012-1185

ImageMagick 6.7.5 and earlier is affected by CVE-2012-1185 via an incorrect handling of the ResolutionUnit EXIF IFD0 offset, leading to memory corruption with crafted inputs and potential remote code execution. The issue is tied to an incomplete fix for CVE-2012-0247, as documented across multipl...

CVE-2013-4075

CVE-2013-4075 affects Wireshark 1.8.x before 1.8.8, where epan/dissectors/packet-gmr1_bcch.c fails to properly initialize memory, enabling remote attackers to crash the application with a crafted packet (Denial of Service). Public references confirm the issue as a memory initialization bug in the...

CVE-2013-6621

CVE-2013-6621 is a use-after-free vulnerability in Chromium/Chrome related to speech input handling (x-webkit-speech) in a text INPUT element. A remote attacker could exploit this to cause a denial of service and potentially other impacts. Affected software: Google Chrome prior to 31.0.1650.48 (a...

CVE-2014-9672

CVE-2014-9672 affects FreeType before 2.5.4, where an array index error in parse_fond (base/ftmac.c) can be triggered by a crafted FOND resource in a Mac font file, enabling a denial of service (out-of-bounds read) and potential information disclosure from process memory. The connected documents ...

CVE-2014-9718

CVE-2014-9718 affects QEMU 1.0–2.1.3 (IDE: BMDMA and AHCI HBA). The vulnerability comes from multiple interpretations of a function return value in bmdma_prepare_buf/ahci_dma_prepare_buf, allowing a guest OS user to trigger host DoS via a PRDT with zero complete sectors, potentially causing memor...

CVE-2014-9747

CVE-2014-9747 affects the FreeType font library (before 2.5.4). The root cause is in t42_parse_encoding (type42/t42parse.c): it does not properly update the current position for immediates-only mode, enabling a remote attacker to trigger a denial of service via a crafted Type42 font (infinite loo...

CVE-2015-2188

Wireshark vulnerability CVE-2015-2188 affects the WCP dissector (epan/dissectors/packet-wcp.c). The issue is that the data structure is not properly initialized, allowing a crafted packet (via decompression) to trigger an out-of-bounds read and crash the application, enabling a remote DoS. Affect...

CVE-2016-10746

CVE-2016-10746 affects libvirt before 1.3.1: libvirt-domain.c allows virDomainGetTime API calls by guest agents over an RO connection when an RW connection was required. Root cause is a permission/connection type mismatch enabling information disclosure or potential denial of service. Remediation...

CVE-2016-1649

CVE-2016-1649 affects Google Chrome’s ANGLE component (libANGLE/Program.cpp) and is caused by a data-type mismatch in Program::getUniformInternal, leading to a denial of service via a crafted shader stage buffer overflow in Chrome before 49.0.2623.108. The issue is associated with the ANGLE libra...

CVE-2016-7421

CVE-2016-7421 affects QEMU and is reported in multiple advisories. The vulnerability is in pvscsi_ring_pop_req_descr (hw/scsi/vmw_pvscsi.c) where a failure to limit the IO loop to the ring size can allow a local guest OS administrator to trigger a denial of service, causing an infinite loop and Q...

CVE-2016-9119

CVE-2016-9119 is an XSS vulnerability in the link dialogue of the MoinMoin GUI editor prior to 1.9.8, allowing remote injection of script or HTML via unspecified vectors. The connected documents corroborate the issue in MoinMoin’s GUI editor and note a fixed version (1.9.9) released in maintenanc...

CVE-2017-15423

CVE-2017-15423 affects Google Chrome’s BoringSSL SPAKE2 implementation prior to 63.0.3239.84, enabling a remote attacker to leak low-order bits of SHA512(password) by inspecting protocol traffic. The vulnerability is documented in CVE-2017-15423 and corroborated by CNVD-2018-20147 (Google Chrome ...

CVE-2017-5044

CVE-2017-5044 is a heap-buffer-overflow in Skia’s filter processing within Google Chrome prior to 57.0.2987.98 (Mac/Windows/Linux) and 57.0.2987.108 on Android. A crafted HTML page can cause an out-of-bounds memory read by the browser, enabling remote code execution according to the CVE entry. Th...

CVE-2017-5091

CVE-2017-5091 is a use-after-free in Chromium’s IndexedDB, affecting Chromium

CVE-2017-5848

The CVE-2017-5848 entry affects GStreamer’s gst-plugins-bad suite, specifically the gst_ps_demux_parse_psm function in gst-mpegdemux/gstmpegdemux.c. Affected component: GStreamer plugins-bad. Root cause: remote parsing of PSM can lead to an invalid memory read, crashing the process and enabling a...

CVE-2017-6011

CVE-2017-6011 affects icoutils (notably the icotool) with an out-of-bounds read in extract.c (simple_vec) that can lead to a buffer overflow and possible arbitrary code execution or crash. Public advisories indicate multiple vendor patches and version upgrades (e.g., icoutils 0.31.x updates acros...