CVE-2009-1721

OpenEXR versions affected: 1.2.2 and 1.6.1. The issue is in the decompression path (Imf::hufUncompress) where a free of an uninitialized pointer could corrupt memory, enabling a denial of service or potentially arbitrary code execution. Affected components: OpenEXR’s decompression code. Remediati...

CVE-2012-1610

CVE-2012-1610 affects ImageMagick: GetEXIFProperty in magick/property.c can overflow when processing EXIF tags with large component counts in a JPEG, leading to an out-of-bounds read and potential DoS. Affected releases reported include ImageMagick before 6.7.6-4; mitigation is to upgrade to 6.7....

CVE-2013-1915

CVE-2013-1915 (ModSecurity XXE) : ModSecurity before 2.7.3 is vulnerable to an XML External Entity (XXE) attack via an XML entity declaration and a referenced entity. This can allow remote attackers to read arbitrary files, make HTTP requests to intranet servers, or trigger denial of service (CPU...

CVE-2014-3166

CVE-2014-3166 affects the SPDY information-leak in Google Chrome before 36.0.1985.143 (Windows/macOS/Linux) and before 36.0.1985.135 on Android. The published details in connected sources identify an information disclosure vulnerability in the SPDY protocol implementation that could allow a remot...

CVE-2014-3730

The CVE-2014-3730 issue affects Django’s is_safe_url logic. Affected versions are Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4. The flaw allows remote attackers to perform open redirect attacks via malformed URLs, enabling redirection to potentially malicious...

CVE-2014-6275

CVE-2014-6275 affects FusionForge prior to version 5.3.2. The vulnerability arises because FusionForge uses scripts that run under the shared Apache user, which is also used by project homepages by default. When project webpages reside on the same server as FusionForge, this can allow users to ac...

CVE-2015-1288

CVE-2015-1288 affects Google Chrome’s Spellcheck API: the Hunspell dictionary was downloaded without HTTPS, enabling potential MITM manipulation of spelling suggestions. Affected code path: downloading Hunspell dictionaries over plain HTTP. Impact, as stated, includes possible incorrect spelling ...

CVE-2015-8745

CVE-2015-8745 affects QEMU with VMXNET3 paravirtual NIC emulation. Issue: reading Interrupt Mask Registers (IMR) can crash the QEMU process when exploited by a privileged guest (CAP_SYS_RAWIO), causing DoS. Connected data confirms the crash is tied to IMR access, not a remote exploit, and multipl...

CVE-2016-1902

CVE-2016-1902 affects Symfony’s SecureRandom class prior to: 2.3.37, 2.6.x prior to 2.6.13, and 2.7.x prior to 2.7.9 when used with PHP 5.x without the paragonie/random_compat library. The OpenSSL/openssl_random_pseudo_bytes path may fail, causing weak or non-secure random numbers and undermining...

CVE-2016-4453

Technical details for CVE-2016-4453 are not publicly provided in the connected documents. The description notes a QEMU vmsvga issue, but no vendor/product/version specifics or fix are included here. Monitor for updates.

CVE-2016-5106

CVE-2016-5105, CVE-2016-5106, and CVE-2016-5107 affect QEMU when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation. The IBM PowerKVM bulletin (E73B43A9…) states the root cause as: a MegaRAID emulation path (megasas.c) with an uninitialized variable leading to host memory read (5105), an ...

CVE-2016-7155

CVE-2016-7155 affects QEMU’s VMware paravirtual SCSI (pvscsi) emulation. A local privileged attacker could trigger an out-of-bounds read/write or an infinite loop in hw/scsi/vmw_pvscsi.c, potentially crashing the QEMU process. Public advisories consistently describe DoS/crash outcomes. Remediatio...

CVE-2017-11521

CVE-2017-11521 concerns resiprocate's SdpContents::Session::Medium::parse in reSIProcate 1.10.2, allowing remote denial of service via memory growth when many media connections are triggered. Related CVE-2018-12584 affects ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx, enabli...

CVE-2017-12099

Technical details of CVE-2017-12099 are not publicly available in the provided connected documents; monitor for updates.

CVE-2017-12103

CVE-2017-12103 affects Blender, specifically v2.78c, where an integer overflow in converting text rendered as a font into a curve can cause a buffer overflow and remote code execution under the application context. The issue can be triggered by opening a crafted .blend file or using it as a libra...

CVE-2017-12104

Blender includes an exploitable integer overflow in the way it draws a Particle object in Blender 2.78c, enabling a buffer overflow and potential code execution when a crafted .blend file is opened or used as a library. Public advisories (Debian DLA-1465, Debian DSA-4248) indicate this family of ...

CVE-2017-14441

SDL2_image-2.0.2 contains an exploitable vulnerability in the ICO image rendering path: a crafted ICO can trigger an integer overflow that cascades to a heap overflow and code execution (CVE-2017-14441). Public advisories reference SDL2_image 2.0.4 as the fixed version and encourage upgrading (e....

CVE-2017-15409

CVE-2017-15409 describes a heap buffer overflow in Skia used by Google Chrome prior to 63.0.3239.84. The vulnerability can allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page, as indicated by the description. The affected component is Skia within C...

CVE-2017-2923

The CVE-2017-2923 entry concerns FreeXL 1.0.3, where a heap-based buffer overflow in the read_biff_next_record function can be triggered by a crafted XLS file. This memory corruption allows remote code execution, with the attack vector described as sending a malicious XLS file. The provided conne...

CVE-2017-5105

CVE-2017-5105 affects Chromium/Chromium-based browsers prior to version 60.0.3112.78. The issue is Insufficient Policy Enforcement in the Omnibox, allowing a remote attacker to spoof domains via IDN homographs in specially crafted domain names. Public advisories and security trackers (e.g., Arch ...

CVE-2017-5120

CVE-2017-5120 describes a downgrade of HTTPS during redirects in the Chromium/Chrome browser. Affected: Chromium/Chrome before 61.0.3163.79 on desktop (Mac/Windows/Linux) and 61.0.3163.81 on Android, with downstream advisories referencing Chromium builds. Root cause: a misdesign workaround for ww...

CVE-2017-6801

CVE-2017-6801 is a libytnef (ytnef) vulnerability describing a potential out-of-bounds access in TNEFParse() for fields of Size 0. Connected advisories confirm this affects Yerase’s TNEF across multiple distributions. Fedora’s ytnef 1.9.3 package update (FEDORA-2019-7d7083b8be) and related Debian...

CVE-2017-7943

CVE-2021-20189 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-8073

CVE-2017-8073 affects WeeChat, where the IRC plugin allows a remote attacker to trigger a buffer overflow by sending a specially crafted filename via DCC, exploiting in the irc_ctcp_dcc_filename_without_quotes path during quote removal and potentially causing a denial-of-service. Debian advisorie...

CVE-2017-9142

CVE-2017-9142 entry is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2018-1000178

Quassel Core vulnerability CVE-2018-1000178 involves a heap corruption (CWE-120) in DataStreamPeer::processMessage inside quasselcore on version 0.12.4, enabling remote code execution by an attacker. Public advisories (Mageia GLSA-201806-04) note that Quassel users should upgrade to 0.12.5 to add...

CVE-2019-12474

CVE-2019-12474 affects Wikimedia MediaWiki 1.23.0 through 1.32.1. The issue is an information leak where privileged API responses that reveal whether a recent change has been patrolled may be cached publicly. The underlying problem is caching of sensitive patrolling status in privileged API respo...

CVE-2019-6245

CVE-2019-6245 affects svgpp (SVG++), via Anti-Grain Geometry (AGG) 2.4 integration. The issue is in agg::cell_aa::not_equal where dx is computed as (x2 - x1); if dx >= dx_limit (16384 <

CVE-2019-9735

CVE-2019-9735 affects the OpenStack Neutron iptables security group driver. In affected releases (OpenStack Neutron before 10.0.8; 11.x before 11.0.7; 12.x before 12.0.6; 13.x before 13.0.3), setting a destination port in a security group rule together with a protocol that doesn’t support that op...

CVE-2020-29565

An OpenStack Horizon vulnerability (CVE-2020-29565) arises from insufficient validation of the next URL parameter, allowing an attacker to trigger an automatic redirect to a malicious URL. Affected Horizon branches include pre-15.3.2, 16.x pre-16.2.1, 17.x and 18.x pre-18.3.3, as well as 18.4.x a...

CVE-2020-35480

MediaWiki before 1.35.1 is affected by CVE-2020-35480: missing and hidden users that are not visible to the viewer cause information disclosure, exposing sensitive data about the hidden status across multiple code paths. The advisory chain indicates this is fixed upstream in 1.35.1; upgrade to 1....

CVE-2020-35533

CVE-2020-35533 is an out-of-bounds read in LibRaw’s Adobe DNG decoding path: LibRaw::adobe_copy_pixel() in libraw/src/decoders/dng.cpp when reading image data. Public references (Debian DLA-3113, Ubuntu USN-5715-1, Amazon Linux ALAS2-2023-2234, etc.) tie CVE-2020-35533 to LibRaw and note that Lib...

CVE-2021-21417

CVE-2021-21417 concerns fluidsynth, a SoundFont 2 software synthesizer. A use-after-free vulnerability is triggered when loading an invalid SoundFont file, as documented in multiple connected sources. The issue is described consistently across CVE listings and security advisories (e.g., NVD entry...

CVE-2021-21839

GPAC Project on Advanced Content library v1.0.1 contains multiple exploitable integer overflow vulnerabilities in the MPEG-4 decoding path that can lead to heap-based buffer overflows and memory corruption. The root cause is unchecked arithmetic during MPEG-4 atom/FOURCC processing, enabling an a...

CVE-2021-21840

GPAC Project on Advanced Content (GPAC) library v1.0.1 contains a vulnerability in MPEG-4 decoding. A crafted MPEG-4 input targeting the saio FOURCC can trigger an integer overflow, leading to a heap-based buffer overflow and memory corruption. The issue is exploitable when a user opens a malicio...

CVE-2021-28708

Xen PoD (populate-on-demand) handling contains a misalignment in base page frame number checks for certain hypercalls (XENMEM_decrease_reservation and XENMEM_populate_physmap). This affects x86 HVM/PVH guests and may allow out-of-bounds page-range operations; in particular, XENMEM_decrease_reserv...

CVE-2021-30130

CVE-2021-30130 affects phpseclib prior to 2.0.31 and 3.x prior to 3.0.7, where RSA PKCS#1 v1.5 signature verification is mishandled. This could allow attackers to bypass certain authorization checks due to invalid signatures being accepted. Ubuntu/Debian advisories and Debian security trackers do...

CVE-2021-34055

CVE-2021-34055 affects jhead (EXIF JPEG header tool). A buffer overflow in exif.c Put16u and related handling can enable crafted JPEGs to trigger overflow, potentially allowing command execution or denial of service. Affected releases include older jhead packages across Debian/Ubuntu/DLSA advisor...

CVE-2021-3911

CVE-2021-3911 : In Cloudflare’s CFRPKI/OctoRPKI stack, a ROA response containing too many bits for the IP address can cause OctoRPKI to crash, i.e., an availability issue. The vulnerability is triggered when the ROA payload’s IP bit width exceeds expected limits, leading to a crash rather than a ...

CVE-2022-42313

CVE-2022-42313 concerns Xenstore/xenstored. Malicious guests can cause xenstored to allocate unusually large amounts of memory, leading to DoS. The entry lists several memory-pressure vectors: issuing requests without reading responses (buffered in memory), generating many xenstore watches, creat...

CVE-2022-45062

CVE-2022-45062 affects xfce4-settings, specifically the xfce4-mime-helper component, with versions before 4.16.4 and 4.17.x before 4.17.1 vulnerable to argument injection. Public details indicate exploitation via xdg-open, enabling code execution on user machines (via crafted links in PDFs). Reme...

CVE-2024-41311

Summary: CVE-2024-41311 affects Libheif 1.17.6 and is tied to an insufficient checks issue in ImageOverlay::parse() when decoding a HEIF with forged overlay offsets, leading to an out-of-bounds read and write. Publicly documented references indicate multiple OSS advisories and vendor responses. A...

CVE-2025-38027

The CVE-2025-38027 entry describes a Linux kernel vulnerability in the regulator max20086 code path. The root cause is that max20086_parse_regulators_dt() uses an on-stack array of struct of_regulator_match for matches and then relies on devm_of_regulator_put_matches(), which allocates a devm_of_...

CVE-2025-38034

CVE-2025-38034 : The connected Azure Linux 3.0 Nessus entry confirms a Linux kernel issue affecting btrfs paths where btrfs__prelim_ref calls wrong order of oldref/newref, causing a NULL pointer dereference in trace_btrfs_prelim_ref_insert(). The backtrace shows the call path ending in prelim_ref...

CVE-2025-38044

CVE-2025-38044 affects the Linux kernel cx231xx media subsystem. The video_device for the MPEG encoder did not set device_caps, preventing registration and causing a WARN_ON. The fix adds device_caps for the 417 decoder path so the video device can register normally. This addresses a local-priori...

CVE-2025-38108

CVE-2025-38108 affects the Linux kernel’s network scheduler, specifically the RED qdisc. The issue is a race in __red_change() where the SFQ perturb timer can fire at an inopportune time, allowing an underflow of a parent qlen during a concurrent qdisc_tree_flush/backlog sequence. The race scenar...

CVE-2025-38143

CVE-2025-38143 (Linux kernel) is addressed in Azure Linux 3.0 by a patch that fixes a NULL-dereference in backlight pm8941 when devm_kasprintf() returns NULL. The issue occurs in wled_configure() due to a missing NULL check after allocation. The fix adds the necessary NULL check after devm_kaspri...

CVE-2025-38166

CVE-2025-38166: In the Linux kernel, the bpf ktls panic with sockmap was fixed. The issue arises when a BPF program adds data to a message (e.g., via bpf_msg_push_data) increasing msg_pl->sg.size after a cork scenario, which can trigger a rollback path that assumes a consistent msg_iter size. ...

CVE-2025-38194

CVE-2025-38194 affects the Linux kernel’s JFFS2 file system. The issue arises when jffs2_sum_write_sumnode does not validate the return value of jffs2_prealloc_raw_node_refs, allowing an preallocation error to propagate into jffs2_link_node_ref and potentially cause a kernel BUG at fs/jffs2/nodel...

CVE-2025-38260

CVE-2025-38260 concerns a Linux kernel bug in Btrfs where a corrupted csum (checksum) tree root could lead to a crash when mounting with rescue=ibadroots. The provided description details that normally this option should set BTRFS_FS_STATE_NO_DATA_CSUMS to skip csum searches for future data reads...