CVE-2010-2547

GnuPG 2.x is affected by CVE-2010-2547: a use-after-free in gpgsm/kbx-blob.c when importing or verifying a certificate with a large number of Subject Alternative Names can be exploited to crash the process or possibly execute arbitrary code. Impact is a denial of service with potential remote cod...

CVE-2013-2901

CVE-2013-2901 corresponds to an integer overflow in ANGLE used by Google Chrome (renderer code paths libGLESv2/renderer/Renderer9.cpp and Renderer11.cpp). The issue arises in ANGLE, and, per the description, could enable a remote attacker to cause a denial of service or potentially other impact v...

CVE-2014-9087

CVE-2014-9087: Libksba’s ksba_oid_to_str() has an integer underflow pre-1.3.2, used by GnuPG, enabling a crafted OID in S/MIME or ECC OpenPGP data to trigger a crash (DoS) or potential overflow. Affected: Libksba/libksba_oid_to_str; Fix: upgrade to Libksba 1.3.2 or newer. No exploit details in pr...

CVE-2015-1236

The CVE-2015-1236 entry refers to a Chrome/Blink vulnerability in the Web Audio API: MediaElementAudioSourceNode::process in Blink’s Web Audio implementation allows a remote site with a media element to bypass Same Origin Policy and access sensitive audio samples. Impact data from the sources con...

CVE-2015-1252

Chrome CVE-2015-1252 affects the common/partial_circular_buffer.cc vulnerability in Google Chrome before 43.0.2357.65. The issue is an out-of-bounds write when handling wraps in PartialCircularBuffer::Write/PartialCircularBuffer::DoWrite, which could allow a sandbox escape or cause a denial of se...

CVE-2015-1260

CVE-2015-1260 affects Google Chrome up to version 43.0.2357.65, where multiple use-after-free vulnerabilities exist in the WebRTC interface (content/renderer/media/user_media_client_impl.cc). Exploitation via crafted JavaScript after getUserMedia can lead to denial of service and possibly other i...

CVE-2015-5261

CVE-2015-5261 is a heap-based buffer overflow in SPICE before 0.12.6 that allows local guest OS users to read from or write to arbitrary host memory via guest QXL surface-creation parameters. This is a local vulnerability affecting SPICE/QXL components used in virtualized environments. See connec...

CVE-2016-10711

Pound (reverse proxy/load balancer) before 2.8a is exposed to HTTP request smuggling via crafted headers (CVE-2016-10711). The issue is documented across multiple feeds (NVD/NIST, Debian, USN) as a related vulnerability to CVE-2016-10711; affected versions include Pound up to 2.8a. Exploitation d...

CVE-2016-1648

Google Chrome vulnerability CVE-2016-1648 is a use-after-free in the Extensions implementation (renderer/loadtimes_extension_bindings.cc GetLoadTimes) that could allow remote disruption via crafted JavaScript. Affected product: Chrome before 49.0.2623.108; remediation: update to 49.0.2623.108 or ...

CVE-2016-1651

CVE-2016-1651 corresponds to an out-of-bounds read in the Pdfium JPEG2000 decoding path used by Chrome/Chromium (fxcodec/codec/fx_codec_jpx_opj.cpp) due to incorrect sycc420_to_rgb and sycc422_to_rgb implementations. This can allow a remote attacker to read sensitive process memory or cause a den...

CVE-2016-1658

CVE-2016-1658 affects Google Chrome’s Extensions subsystem, where GetOrigin-based origin comparisons could allow a malicious extension to access sensitive information and leak data across origins. The vulnerability is tied to how file: URL origins were handled, enabling potential leakage via exte...

CVE-2016-1682

The CVE-2016-1682 entry covers a CSP bypass in ServiceWorker registration via Blink/WebKit used by Google Chrome prior to 51.0.2704.63. Affected component is ServiceWorkerContainer::registerServiceWorkerImpl in Blink; root cause is CSP protection bypass during ServiceWorker registration. Impact i...

CVE-2016-1685

CVE-2016-1685 affects PDFium (as used in Google Chrome). The vulnerability is an out-of-bounds read in pdfium/fxge/ge/fx_ge_text.cpp due to miscalculated index values, enabling remote attackers to trigger a denial of service via crafted PDF documents. Public advisories/entries (e.g., Debian/Chrom...

CVE-2016-3159

CVE-2016-3159 affects Xen 4.x on AMD64, where the fpu_fxrstor handler in arch/x86/i387.c mishandles writes to the FSW.ES bit, enabling a local guest to read sensitive register content from another guest by exploiting pending exception/mask bits. The issue stems from an incorrect fix for CVE-2013-...

CVE-2016-9375

Wireshark DTN dissector (epan/dissectors/packet-dtn.c) could loop indefinitely when processing certain traffic or capture files in Wireshark 2.0.0–2.0.7 and 2.2.0–2.2.1. Root cause: SDNV evaluation could fail to terminate, enabling a denial-of-service condition. Upstream fix implemented in the DT...

CVE-2017-11173

The vulnerability CVE-2017-11173 affects rack-cors before 0.4.1, where a missing anchor in the generated regex can under-validate domain restrictions. This can allow a malicious third party to perform cross-origin requests through CORS by tricking configurations that intended to allow only truste...

CVE-2017-16872

CVE-2017-16872 affects Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The issue arises when parsing numeric SIP header fields (e.g., CSeq, ttl, port); values can overflow and may be captured incorrectly or cause a buffer overrun if converted back to strings, enabling a potential ex...

CVE-2017-18123

CVE-2017-18123 affects DokuWiki up to version 2017-02-19e. The vulnerability stems from improper encoding of user input in the call parameter of /lib/exe/ajax.php, enabling a reflected file download that allows an attacker to trigger execution of arbitrary programs on the server. The issue is des...

CVE-2017-2887

CVE-2017-2887 affects SDL_image 2.0.1, with a stack-based buffer overflow in the XCF property handling. A specially crafted XCF file can overflow a stack buffer, potentially enabling code execution. The vulnerability is exploitable via crafted XCF input and does not specify a required user intera...

CVE-2017-5102

CVE-2017-5102 affects Google Chrome (Skia) prior to 60.0.3112.78 on Linux, Windows, macOS, and Android. The issue is caused by use of an uninitialized value in Skia, allowing a remote attacker to read potentially sensitive information from a process’s memory via a crafted HTML page. Public refere...

CVE-2017-5103

CVE-2017-5103 concerns Google Chrome and Chromium browsers where a flaw in the Skia library—an uninitialized value—could allow a remote attacker to read potentially sensitive data from a process’s memory via a crafted HTML page. Affected products include Chrome on Linux, Windows, and macOS, with ...

CVE-2017-5104

CVE-2017-5104 concerns Google Chrome on macOS, where an improper interstitial implementation allowed a remote attacker to spoof the omnibox contents via crafted HTML. Multiple connected advisories confirm a UI/spoofing issue in Chromium/Chrome prior to version 60.0.3112.78, with remediation by up...

CVE-2018-11385

CVE-2018-11385 affects the Symfony Security component (Guard login) across multiple branches: 2.7.x <= 2.7.47 (fixed in 2.7.48), 2.8.x <= 2.8.40 (fixed in 2.8.41), 3.3.x <= 3.3.16 (fixed in 3.3.17), 3.4.x <= 3.4.10 (fixed in 3.4.11), and 4.0.x

CVE-2018-3838

The CVE-2018-3838 entry concerns SDL2_image-2.0.2: an exploitable vulnerability in the XCF image rendering path can trigger an out-of-bounds read on the heap, leading to information disclosure. Public reports (e.g., TALOS advisories and related Debian/Gentoo/Mageia notices) confirm this family of...

CVE-2019-11187

CVE-2019-11187 concerns the GOsa LDAP class in GONICUS GOsa up to 2019-04-11, where an incorrect access-control flaw can allow login to any account whose username contains the case-insensitive substring “success” when an arbitrary password is provided. The issue is described as an authorization b...

CVE-2019-14586

CVE-2019-14586 is a use-after-free vulnerability in the EDK II firmware component. The connected documents confirm the issue affects the edk2 package within EulerOS/Oracle Linux environments, and that an authenticated user could potentially escalate privileges, disclose information, or cause deni...

CVE-2019-3467

CVE-2019-3467 affects Debian-LAN-related components used with Debian Edu: Debian-edu-config versions earlier than 2.11.10 and debian-lan-config earlier than 0.26 were configured with overly permissive ACLs on the Kerberos admin server. This misconfiguration allowed password changes for other Kerb...

CVE-2020-21675

CVE-2020-21675 affects fig2dev 3.2.7b, caused by a stack-based buffer overflow in the genptk_text component (genptk.c), which can lead to denial of service when converting XFig to ptk. Affected product: fig2dev (Xfig suite). Root cause: stack overflow in genptk_text. Impact: DoS via crafted input...

CVE-2020-28635

CVE-2020-28635 affects CGAL’s Nef polygon-parsing in the CGAL-5.1.1 package. The entry describes multiple out-of-bounds read vulnerabilities in the Nef parser that can lead to code execution when processing crafted input, specifically mentioning the SNC_io_parser and read_sedge()/facet() paths, a...

CVE-2020-35357

The CVE-2020-35357 entry concerns the GNU Scientific Library (GSL). The linked documents confirm a buffer overflow in gsl_stats_quantile_from_sorted_data when calculating a quantile, observable in GSL versions 2.5 and 2.6. The impact described is that a crafted input could cause arbitrary code ex...

CVE-2021-21834

GPAC Project on Advanced Content library v1.0.1 contains an exploitable integer overflow in the MPEG-4 decoding path (co64 atom) that leads to a heap-based buffer overflow and memory corruption. An attacker can convince a user to open a crafted MPEG-4 video to trigger this vulnerability. Public a...

CVE-2021-21838

GPAC library (GPAC Project on Advanced Content) 1.0.1 contains multiple CVE-2021-21838 family integer overflow vulnerabilities in MPEG-4 decoding, leading to heap-based buffer overflow and memory corruption. Impacted when processing specific MPEG-4 inputs; exploitation requires user action (openi...

CVE-2021-43666

CVE-2021-43666 is a Denial of Service vulnerability in the mbed TLS project. It affects mbedtls_pkcs12_derivation when the input password length is 0 in versions 3.0.0 and earlier. The impact is a DoS condition (availability impact). Public documentation in connected sources confirms the issue an...

CVE-2021-45343

CVE-2021-45343 affects LibreCAD 2.2.0, where a NULL pointer dereference in the HATCH handling of libdxfrw can crash the application when processing a crafted DXF. The issue is rooted in the libdxfrw component used by LibreCAD, leading to a denial-of-service-style crash. Connected sources corrobor...

CVE-2022-0534

CVE-2022-0534 affects htmldoc 1.9.15, where a stack out-of-bounds read in gif_get_code() occurs when opening a crafted GIF, potentially causing a segmentation fault (crash). Public advisories reference this CVE alongside other HTMLDOC issues and commonly recommend upgrading to a newer htmldoc rel...

CVE-2022-23947

CVE-2022-23947 affects KiCad EDA's Gerber Viewer, specifically the DCodeNumber parsing in the Excellon/Gerber handling path. A stack-based buffer overflow could allow code execution when processing crafted Gerber/Excellon files (KiCad 6.0.1 and the master commit de006fc010 are cited). Related adv...

CVE-2022-3008

CVE-2022-3008 affects the tinygltf library. The vulnerability arises from using the C function wordexp() to perform file path expansion on untrusted input, enabling potential command execution (path expansion via backticks). The issue is documented across multiple sources: Debian security advisor...

CVE-2022-41639

OpenImageIO CVE-2022-41639 is a heap-based buffer overflow in the TIFF tile decoding code, present in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially crafted TIFF file can trigger out-of-bounds memory corruption, potentially leading to arbitrary code execution. Public advisories (De...

CVE-2022-41794

OpenImageIO-PSD parsing vulnerability CVE-2022-41794 is a heap-based buffer overflow in the PSD thumbnail resource parsing of OpenImageIO 2.3.19.0 that can allow arbitrary code execution via a crafted PSD file. The issue has been addressed in various vendor advisories; affected users should upgra...

CVE-2022-42314

CVE-2022-42314 is a Xenstore vulnerability in Xen that can allow a guest to cause xenstored to exhaust memory and crash or suffer a DoS. Connected advisories describe several memory-exhaustion vectors, including: issuing new requests to xenstored without reading responses (buffering in memory), g...

CVE-2022-43599

OpenImageIO CVE-2022-43599 affects OpenImageIO v2.4.4.2, where the IFFOutput::close() path can trigger a heap buffer overflow when xmax is 0xFFFF and m_spec.format is TypeDesc::UINT8. Connected advisories (GLSA 202305-33, Debian DSA-5384, Debian DLA-3382) describe this family of OpenImageIO vulne...

CVE-2022-43603

OpenImageIO has a denial-of-service vulnerability CVE-2022-43603 in ZfileOutput::close() for OpenImageIO v2.4.4.2 where processing a malicious ImageOutput can crash the application. Public advisories (Gentoo GLSA, Fedora advisory) indicate the fix is to upgrade to OpenImageIO 2.4.6.x (e.g., 2.4.6...

CVE-2025-38023

CVE-2025-38023 affects the Linux kernel: if nfs_get_lock_context() fails due to ENOMEM, a stored -ENOMEM in an nfs4_unlockdata could be treated as valid and lead to a NULL pointer dereference in nfs4_locku_prepare via rpc_run_task. The fix ensures nfs4_unlockdata is freed when allocation fails an...

CVE-2025-38119

CVE-2025-38119 corresponds to a Linux kernel vulnerability in the SCSI/UFS stack that fixes a hang in the error handler. The issue stems from ufshcd_err_handling_prepare() calling ufshcd_rpm_get_sync() in a context where UFSHCD_EH_IN_PROGRESS may be set, causing the resume flow to queue commands ...

CVE-2025-38122

In CVE-2025-38122, the Linux kernel vulnerability is due to a missing NULL check in gve_alloc_pending_packet() used by gve_tx_add_skb_dqo(). The function can return NULL, but the caller did not guard against this, risking NULL pointer dereference in low‑memory scenarios. The fix adds the missing ...

CVE-2025-38157

Affected software: Linux kernel driver ath9k_htc (wifi). Issue: when an adversarial USB device emits WMI_SWBA_EVENTID before beaconing is enabled, ath9k_htc_swba() may trigger a device-by-zero error causing a crash or out-of-bounds read. Root cause: improper handling of software beacon processing...

CVE-2025-38229

CVE-2025-38229 – Linux kernel (cxusb/dvb-usb I2C path) – concrete details : The issue arises in the I2C transfer path for cxusb-based DVB devices. When a usb_bulk_msg() write succeeds but rlen > 0, the subsequent read may still occur; however, if the write fails and rlen is 1, the read path is...

CVE-2025-38257

The CVE-2025-38257 vulnerability is in the Linux kernel (s390/pkey) where the size calculation for memdup_user() can overflow because the number of apqn target list entries (nr_apqns) is supplied by userspace via ioctl, causing the allocated area size to diverge from its description and leading t...

CVE-2025-38259

The CVE CVE-2025-38259 affects the Linux kernel ASoC: codecs/wcd9335 regulator handling. The issue was that the driver acquired and enabled regulator supplies in probe paths (wcd9335_parse_dt, wcd9335_power_on_reset) but failed to cleanup in error paths and unbind, causing memory leaks and an unb...

CVE-2025-38305

CVE-2025-38305 affects the Linux kernel: the advisory describes removing the ptp->n_vclocks check logic in ptp_vclock_in_use() to avoid a recursive locking scenario. The trigger involves reading ptp->n_vclocks under the n_vclocks_mux while another path holds the same mutex, causing a potent...