CVE-2023-45363

The CVE-2023-45363 issue affects MediaWiki and specifically the ApiPageSet.php path. Affected variants include MediaWiki releases before 1.35.12, 1.36.x–1.39.x before 1.39.5, and 1.40.x before 1.40.1. The vulnerability allows a denial of service via an unbounded loop when querying pages redirecte...

CVE-2024-41311

Summary: CVE-2024-41311 affects Libheif 1.17.6 and is tied to an insufficient checks issue in ImageOverlay::parse() when decoding a HEIF with forged overlay offsets, leading to an out-of-bounds read and write. Publicly documented references indicate multiple OSS advisories and vendor responses. A...

CVE-2024-52035

CVE-2024-52035 concerns catdoc 0.95, where an integer overflow in the OLE Document File Allocation Table Parser can cause heap-based memory corruption when processing a crafted file. The vulnerability is documented across multiple sources (NVD and Debian advisories) and is exploitable locally via...

CVE-2025-38018

Technical details for CVE-2025-38018 are not publicly provided in the supplied documents; monitor for updates.

CVE-2025-38043

CVE-2025-38043 affects the Linux kernel firmware/arm_ffa path: a fix sets the dma_mask for FFA devices to prevent DMA allocation using a raw device pointer, which previously triggered a kernel warning “dma_alloc_attrs” in mapping.c. The vulnerability’s impact, per the description, is to avoid mis...

CVE-2025-38066

CVE-2025-38066 affects the Linux kernel in the dm-cache subsystem (policy SMQ). The issue arises when a cache device fails to resume due to mapping errors and a resumed operation is retried, which can leave a partially initialized policy object and trigger a BUG_ON during mapping reload. The conn...

CVE-2025-38112

CVE-2025-38112 (Linux kernel) : A TOCTOU race in sk_is_readable() can occur when a socket resides in a sockmap. If sk->sk_prot is reloaded after the initial check, sk->sk_prot->sock_is_readable may have become NULL, causing a potential null pointer dereference. The issue stems from the f...

CVE-2025-38251

CVE-2025-38251 refers to a NULL-dereference in the Linux kernel ATM clip subsystem (clip_push) when clip_devs is NULL, caused by vcc_destroy_socket() calling clip_push() with a NULL skb. The vulnerability is fixed by upstream commits cited in the CVE entry and is reflected in multiple advisories ...

CVE-2025-38345

CVE-2025-38345: Linux kernel ACPICA ACPI operand cache leak in dswstate.c fixed by ACPICA patch (commit 987a3b5c...). Root cause: miscalculated stack top in acpi_ds_obj_stack_pop_and_delete() vs acpi_ds_obj_stack_push(), leading to kmem_cache_destroy Acpi-Operand memory leak during early terminat...

CVE-2025-38428

CVE-2025-38428 : In the Linux kernel, the vulnerability affects the ims-pcu path where the firmware-provided length (len) is used in memcpy to fragment data in ims_pcu_flash_firmware(). If len is too large, memory corruption can occur. The issue arises from trusting firmware input; the fixed vers...

CVE-2025-38470

CVE-2025-38470 affects the Linux kernel VLAN handling when 8021q rx-vlan-filter is enabled. It can cause VLAN 0 to be emulated on NETDEV_UP/DC_DOWN, leading to a memory leak if VLAN 0 is not removed, or a potential null-vlan_info path triggering a BUG_ON during device teardown. Root cause: refcnt...

CVE-2025-38497

CVE-2025-38497 (Linux kernel) affects usb gadget configfs: writing an empty string to the qw_sign or landingPage sysfs attributes can dereference page[l-1] before length validation, causing an OOB read. The fix adds an early length check in os_desc_qw_sign_store() and webusb_landingPage_store() t...

CVE-2005-1796

CVE-2005-1796 is a format string vulnerability in the Ettercap Ncurses interface (ec_curses.c) that could allow a remote attacker to execute arbitrary code. It affects Ettercap prior to version 0.7.3. Debian advisories confirm a format string error and state upgrades to fix: version 0.7.1-1sarge1...

CVE-2006-5170

CVE-2006-5170 affects pam_ldap in nss_ldap; a PasswordPolicyResponse control could cause pam_authenticate to return success even if authentication failed. Affected platforms include Red Hat Enterprise Linux 4 and Fedora Core 3 and earlier. The issue arises when applications do not properly proces...

CVE-2010-2527

CVE-2010-2527 affects the FreeType 2 font engine (before 2.4.0). The issue is buffer overflows in the FreeType demo programs, which could cause an application crash or potentially allow arbitrary code execution via a crafted font file. Public references in connected documents confirm multiple adv...

CVE-2014-8867

CVE-2014-8867 affects Xen hypervisor: acceleration support for REP MOVS in Xen 4.4.x, 3.2.x and earlier lacks proper bounds checking for MMIO in emulation, allowing a local HVM guest to trigger a host crash (DoS) via unspecified vectors. The connected Nessus/OracleVM advisories reference this CVE...

CVE-2015-1251

Google Chrome CVE-2015-1251 is a use-after-free in SpeechRecognitionClient (Speech subsystem) that enables remote code execution via a crafted document in Chrome versions before 43.0.2357.65. Affected product: Google Chrome; root cause: use-after-free in SpeechRecognitionClient. Impact: remote ar...

CVE-2015-5523

CVE-2015-5523 affects the tidy project (libtidy) ParseValue() in lexer.c; multiple whitespace before an empty href can trigger a large memory allocation and remote DoS. Affected: tidy/libtidy prior to 4.9.31. Remediation: upgrade to 4.9.31+ (vendors like SUSE/Debian reference patching; see SUSE-S...

CVE-2015-7558

CVE-2015-7558 affects librsvg (up to version 2.40.12). The vulnerability arises from cyclic references in SVG documents, allowing context-dependent attackers to cause a denial of service via infinite loops, stack consumption, and application crash. The issue is rooted in librsvg’s SVG processing;...

CVE-2015-8744

CVE-2015-8744 affects QEMU when built with a VMXNET3 paravirtual NIC; the issue arises from improper/layer-2 header handling for very small frames (less than 22 bytes), which could be exploited by a privileged guest to crash the QEMU process and cause DoS. Public details in Debian/related advisor...

CVE-2015-8837

CVE-2015-8837 concerns FuseISO’s isofs.c in isofs_real_readdir, where a stack-based buffer overflow can be triggered by a long pathname in an ISO file, potentially leading to denial of service or arbitrary code execution. Related issue CVE-2015-8836 is an integer overflow in isofs_real_read_zf (i...

CVE-2016-1902

CVE-2016-1902 affects Symfony’s SecureRandom class prior to: 2.3.37, 2.6.x prior to 2.6.13, and 2.7.x prior to 2.7.9 when used with PHP 5.x without the paragonie/random_compat library. The OpenSSL/openssl_random_pseudo_bytes path may fail, causing weak or non-secure random numbers and undermining...

CVE-2016-7155

CVE-2016-7155 affects QEMU’s VMware paravirtual SCSI (pvscsi) emulation. A local privileged attacker could trigger an out-of-bounds read/write or an infinite loop in hw/scsi/vmw_pvscsi.c, potentially crashing the QEMU process. Public advisories consistently describe DoS/crash outcomes. Remediatio...

CVE-2016-7170

CVE-2016-7170 affects QEMU’s VMware SVGA path (hw/display/vmware_vga.c). Local privileged guests can trigger an out-of-bounds access in DEFINE_CURSOR handling (cursor.mask/image), leading to DoS via QEMU crash. Connected advisories (OpenSUSE, Debian DLA) confirm a fix in patched QEMU releases; up...

CVE-2017-0915

CVE-2017-0915 affects GitLab Community Edition 10.2.4, due to a lack of input validation in GitlabProjectsImportService, enabling remote code execution. Public/connected sources confirm arbitrary code execution via project import; remediations in the supplied docs point to upgrading to fixed GitL...

CVE-2017-1000421

Gifsicle before 1.90 (1.89 and older) is affected by a use-after-free in the read_gif function, enabling potential remote code execution via a crafted GIF file. This CVE-2017-1000421 impact is consistent across multiple advisories (e.g., Debian, Fedora, Ubuntu) that link the fix to the 1.90 relea...

CVE-2017-11521

CVE-2017-11521 concerns resiprocate's SdpContents::Session::Medium::parse in reSIProcate 1.10.2, allowing remote denial of service via memory growth when many media connections are triggered. Related CVE-2018-12584 affects ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx, enabli...

CVE-2017-14441

SDL2_image-2.0.2 contains an exploitable vulnerability in the ICO image rendering path: a crafted ICO can trigger an integer overflow that cascades to a heap overflow and code execution (CVE-2017-14441). Public advisories reference SDL2_image 2.0.4 as the fixed version and encourage upgrading (e....

CVE-2017-14450

CVE-2017-14450 affects SDL2_image-2.0.2, where the GIF image parsing functionality has a buffer overflow risk in the global section when processing a specially crafted GIF image displayed by a user. Public sources in connected docs confirm this vulnerability and its association with SDL2_image’s ...

CVE-2017-15409

CVE-2017-15409 describes a heap buffer overflow in Skia used by Google Chrome prior to 63.0.3239.84. The vulnerability can allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page, as indicated by the description. The affected component is Skia within C...

CVE-2017-16653

CVE-2017-16653 concerns Symfony’s CSRF protection: versions prior to 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5 use the same CSRF token for HTTP and HTTPS, enabling MITM abuse where an HTTP token could be used in HTTPS to perform a CSRF attack. The impact is described in the CVE as ...

CVE-2017-16790

Symfony reported vulnerability CVE-2017-16790 affects the Form component where POST data and uploaded files are merged, allowing a crafted request to cause a file path (e.g., file:///etc/passwd) to be interpreted as a local file path and potentially expose server contents. The issue affects Symfo...

CVE-2017-2923

The CVE-2017-2923 entry concerns FreeXL 1.0.3, where a heap-based buffer overflow in the read_biff_next_record function can be triggered by a crafted XLS file. This memory corruption allows remote code execution, with the attack vector described as sending a malicious XLS file. The provided conne...

CVE-2017-5035

CVE-2017-5035 affects Chromium/Google Chrome up to version 57.0.2987.98 (Windows/Mac) and is described in connected advisories as an Incorrect security UI issue in the Omnibox. The root concern is a UI-related vulnerability that could lead to displaying incorrect security/cert information for a s...

CVE-2017-5105

CVE-2017-5105 affects Chromium/Chromium-based browsers prior to version 60.0.3112.78. The issue is Insufficient Policy Enforcement in the Omnibox, allowing a remote attacker to spoof domains via IDN homographs in specially crafted domain names. Public advisories and security trackers (e.g., Arch ...

CVE-2017-5120

CVE-2017-5120 describes a downgrade of HTTPS during redirects in the Chromium/Chrome browser. Affected: Chromium/Chrome before 61.0.3163.79 on desktop (Mac/Windows/Linux) and 61.0.3163.81 on Android, with downstream advisories referencing Chromium builds. Root cause: a misdesign workaround for ww...

CVE-2017-5510

CVE-2017-5510 affects ImageMagick: the PSD file handling in coders/psd.c allows remote attackers to trigger an out-of-bounds write via a crafted PSD image. The Connected documents confirm this vulnerability and link it to multiple ImageMagick PSB/PSD-related issues. Impact is described as unspeci...

CVE-2017-8351

CVE-2017-8351 affects ImageMagick 7.0.5-5. The ReadPCDImage function in pcd.c can be triggered by a crafted PCD file to cause a memory leak, resulting in a denial of service. The connected documents include the exact description of the issue (memory leak/DoS) but do not provide exploit details, a...

CVE-2018-1000036

MuPDF vulnerability CVE-2018-1000036 affects MuPDF 1.12.0 and earlier, caused by memory leaks in the PDF parser that can lead to DoS. Public advisories (Debian DLA-2765, Gentoo GLSA-201811-15, Ubuntu USN-7825-1, OpenVAS/ Nessus entries) corroborate multiple memory-management issues in MuPDF's PDF...

CVE-2019-9735

CVE-2019-9735 affects the OpenStack Neutron iptables security group driver. In affected releases (OpenStack Neutron before 10.0.8; 11.x before 11.0.7; 12.x before 12.0.6; 13.x before 13.0.3), setting a destination port in a security group rule together with a protocol that doesn’t support that op...

CVE-2020-14396

LibVNCServer before 0.9.13 contains a NULL pointer dereference in libvncclient/tls_openssl.c (CVE-2020-14396). Affected: LibVNCServer library; issue documented across multiple sources (NVD OSV/OSV-DEBIAN/CNVD/Ubuntu USN). Impact notes in public advisories describe potential crash or instability; ...

CVE-2020-25467

CVE-2020-25467 affects lrzip’s internals: a null pointer dereference in lzo_decompress_buf (stream.c) of Irzip 0.621 can cause a denial of service via a crafted compressed file. Connected sources confirm multiple vendor advisories and patches across distributions (e.g., Debian DSA-5145-1 and DLA-...

CVE-2021-21839

GPAC Project on Advanced Content library v1.0.1 contains multiple exploitable integer overflow vulnerabilities in the MPEG-4 decoding path that can lead to heap-based buffer overflows and memory corruption. The root cause is unchecked arithmetic during MPEG-4 atom/FOURCC processing, enabling an a...

CVE-2021-21844

GPAC Project on Advanced Content library v1.0.1 contains multiple exploitable integer overflow vulnerabilities in its MPEG-4 decoding path. Specifically, the stco FourCC handling can trigger unchecked arithmetic, causing a heap-based buffer overflow and memory corruption when processing crafted M...

CVE-2021-21846

The CVE-2021-21846 issue affects the GPAC Project on Advanced Content library (GPAC) v1.0.1, specifically the MPEG-4 decoding path. A specially crafted MPEG-4 input in the stsz decoder triggers an unchecked arithmetic path that can overflow and lead to a heap-based buffer overflow, causing memory...

CVE-2021-27577

The CVE-2021-27577 issue affects Apache Traffic Server (ATS) and is caused by incorrect handling of URL fragments, enabling cache poisoning. Affected versions include ATS 7.0.0–7.1.12, 8.0.0–8.1.1, and 9.0.0–9.0.1. Impact is cache poisoning with potential denial of service implications depending ...

CVE-2021-45909

gif2apng 1.9 contains a heap-based buffer overflow in DecodeLZW (CVE-2021-45909). An attacker could write arbitrary data beyond buffer boundaries, enabling a potential denial-of-service. Related issues CVE-2021-45910 and CVE-2021-45911 exist in the same tool. Remediation is available: Debian/Ubun...

CVE-2022-28041

CVE-2022-28041 affects stb_image.h v2.27 with an integer overflow in stbi__jpeg_decode_block_prog_dc, causing Denial of Service. Connected advisories confirm the vulnerable component as stb_image.h (JPEG decoding path) and document remediation: Debian LTS DLA-3305 fixes libstb in Debian 10, Fedor...

CVE-2022-42321

CVE-2022-42321 : In Xen, the Xenstore component (xenstored) can crash due to stack exhaustion from recursive operations when deleting a sub-tree or handling deeply nested Xenstore structures. The vulnerability is triggered by sufficiently deep nesting levels and is exploitable locally (attack vec...

CVE-2022-42332

CVE-2022-42332 concerns Xen’s shadow mode with log-dirty tracking. In environments where host-assisted addressing is needed but Hardware Assisted Paging is unavailable, Xen’s log-dirty infrastructure did not have memory accounted for in some paths, allowing newly established shadow page tables to...