CVE-2021-38714

PLIB 1.85 and earlier contains an integer overflow in ssgLoadTGA() (src/ssg/ssgLoadTGA.cxx) that could enable arbitrary code execution. Multiple advisories confirm the issue across distributions (Debian DLA-2775 for 1.8.5-7+deb9u1; Fedora 37 patch 1.8.5-30.fc37; Ubuntu USN-6353-1). Exploitation i...

CVE-2021-40393

CVE-2021-40393 is an out-of-bounds write in Gerbv’s RS-274X aperture macro variables handling, affecting Gerbv 2.7.0 (and dev) and forked versions. A crafted Gerber file can lead to code execution. The issue is documented across multiple advisories (e.g., Debian DLA-3593-1, Ubuntu USN-6209-1, Fed...

CVE-2021-40874

The vulnerability CVE-2021-40874 affects LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug‑in to run a REST password validation service (e.g., for another LemonLDAP::NG instance) and combining Kerberos authentication with another method via the Combination authentication plu...

CVE-2021-43173

CVE-2021-43173 concerns NLnet Labs Routinator prior to 0.10.2. A validation run can be stalled by an RRDP repository that slowly drip-feeds bytes, exploiting the misapplied timeout (applied to individual reads/writes, not the whole request). This can cause validation to be delayed for so long tha...

CVE-2021-45844

CVE-2021-45844 affects FreeCAD 0.19 via improper sanitization when invoking the ODA File Converter, enabling OS command injection through a crafted filename. Mitigations include upgrading FreeCAD to fixed releases cited by Debian/Mageia advisories (e.g., FreeCAD 0.19.1+dfsg1-2+deb11u1 for Debian ...

CVE-2022-38866

CVE-2022-38866 affects The MPlayer Project, including mplayer and mencoder (SVN-r38374-13.0.1). The root cause is a vulnerability in read_avi_header() in libmpdemux/aviheader.c that can cause a buffer overflow. The related connected advisories/refs also cover additional CVEs for the same project ...

CVE-2022-42333

CVE-2022-42333 and CVE-2022-42334 pertain to Xen Hypervisor issues: (1) CVE-2022-42333 – mis-handling of HVM pinned cache attributes when controlling domains with passed-through devices, where an interface allows overriding defaults; (2) CVE-2022-42334 – unbounded number of controlled regions and...

CVE-2022-44789

The CVE-2022-44789 issue affects Artifex MuJS versions 1.0.0–1.3.x prior to 1.3.2, caused by a logical flaw in O_getOwnPropertyDescriptor() that can lead to Remote Code Execution via memory corruption when loading a crafted JavaScript file. Public references in Debian/Distro advisories and Gentoo...

CVE-2023-45364

Summary (CVE-2023-45364): MediaWiki 1.36.x–1.39.x before 1.39.5 and 1.40.x before 1.40.1 contains an information-disclosure vulnerability in includes/page/Article.php where deleted revision existence is leaked due to incorrect permission checks. An attacker could infer that a given revision ID be...

CVE-2025-38088

CVE-2025-38088 affects the Linux kernel’s memtrace mmap in the PowerPC powernv memory tracing path. The root cause is an out-of-bounds issue when mmap-ing within the memtrace region. The patch fixes this by validating that the requested mapping size does not exceed the allocated memtrace region, ...

CVE-2025-38136

The CVE-2025-38136 issue in the Linux kernel concerns Renesas USBHS on the RZ/V2H platform. Vulnerable path: in usbhs_probe(), clocks are sometimes not enabled before memory-mapped register access (iowrite16), causing a synchronous external abort. Root cause: initialization sequence in usbhs_prob...

CVE-2025-38275

The CVE-2025-38275 entry concerns the Linux kernel, fixing a NULL vs IS_ERR() bug in the qcom-qmp-usb driver. The qmp_usb_iomap() helper previously returned devm_ioremap() results directly for non-exclusive mappings, which could be NULL. If callers only checked IS_ERR(), a NULL pointer could bypa...

CVE-2025-38335

CVE-2025-38335 concerns a Linux kernel vulnerability in the gpio_keys driver related to PREEMPT_RT. The description states that when PREEMPT_RT is enabled, gpio_keys_irq_timer() can run in hard IRQ context while input_event() uses a spin_lock, which is incompatible with hard IRQ. This leads to a ...

CVE-2025-38418

CVE-2025-38418 affects the Linux kernel remoteproc subsystem. The root cause is a failure path in rproc_attach() where, if rproc_handle_resources() fails while the remote processor is in state RPROC_DETACHED, rproc->clean_table is not released, leading to a memory leak (observed in a kworker t...

CVE-2007-6716

CVE-2007-6716 affects the Linux kernel before 2.6.23, where in the dio subsystem the file system’s direct-io path (fs/direct-io.c) may fail to zero out the dio struct. This can allow a local user to cause a denial of service (OOPS), as demonstrated by a fio test. The connected documents confirm t...

CVE-2011-0981

CVE-2011-0981 affects Google Chrome (WebKit/Chromium) prior to 9.0.597.94, where improper event handling for animations can lead to a stale pointer, enabling remote denial-of-service or other unspecified impact via unknown vectors. The entry attributes the issue to WebKit/Chromium components and ...

CVE-2013-2861

CVE-2013-2861 describes a Use-after-free in the SVG implementation of Chromium/Google Chrome prior to 27.0.1453.110. The vulnerability could allow a remote attacker to cause a denial of service or possibly achieve other unspecified impacts via unknown vectors. Public references in Debian security...

CVE-2013-2885

CVE-2013-2885 affects Google Chrome (Chromium-based) prior to 28.0.1500.95. It is a use-after-free in input handling related to focus during processing of JavaScript events with a multiple-fields input type, enabling remote denial of service and possibly other impact. Public advisories (Debian/Ma...

CVE-2015-1249

CVE-2015-1249 corresponds to multiple issues in Google Chrome prior to 42.0.2311.90. Connected advisories indicate these were among several vulnerabilities discovered through internal audits, fuzzing, and other initiatives and fixed in Chrome 42.0.2311.90 (e.g., Debian/Mageia/BSD advisories list ...

CVE-2015-1265

CVE-2015-1265 affects Google Chrome/Chromium up to version 43.0.2357.65. The CVE entry represents multiple unspecified vulnerabilities that could cause a denial of service or other impact via unknown vectors. Publicly linked documents confirm Chrome/Chromium vulnerabilities across several compone...

CVE-2015-1877

CVE-2015-1877 relates to the open_generic_xdg_mime function in xdg-open (xdg-utils 1.1.0 rc1) on Debian with dash. The root cause is improper handling of local variables, which enables remote attackers to execute arbitrary commands via a crafted file. Documented impact is command execution with h...

CVE-2015-2045

CVE-2015-2045 affects Xen hypervisor: the HYPERVISOR_xen_version hypercall in Xen 3.2.x–4.5.x fails to properly initialize data structures, enabling local guest users to obtain sensitive information via unspecified vectors. The affected lineages are Xen 3.2.x–4.5.x with impact limited to informat...

CVE-2015-8346

CVE-2015-8346 affects Redmine, where rendering the timelog form in versions prior to 2.6.8 (and 3.0.x prior to 3.0.6, and 3.1.x prior to 3.1.2) allows remote attackers to obtain sensitive information about subjects of issues. The issue is a information disclosure through the time-logging form. Re...

CVE-2016-1673

CVE-2016-1673 refers to a cross-origin bypass in Blink/WebKit used by Blink in Google Chrome prior to 51.0.2704.63. The connected sources confirm it is part of a set of Chromium/KChrome issues fixed in the 51.0.2704.63 release, with Debian indicating the fix is in chromium-browser 51.0.2704.63-1~...

CVE-2016-1702

The CVE-2016-1702 issue concerns SkRegion::readFromMemory in Skia, used by Google Chrome prior to 51.0.2704.79. The function does not validate the interval count, enabling remote attackers to trigger an out-of-bounds read via crafted serialized data, potentially causing a denial of service. Publi...

CVE-2016-2270

CVE-2016-2270 affects Xen 4.6.x and earlier. The root cause is inconsistent cachability settings on MMIO guest mappings, as evidenced by multiple mappings of MMIO pages with different cachability, which can be exploited by a local guest administrator to trigger a host denial of service (host rebo...

CVE-2016-2318

GraphicsMagick 1.3.23 is affected by CVE-2016-2318, which can cause denial of service via a crafted SVG file due to segmentation faults in render SVG handling (DrawImage, SVGStartElement, TraceArcPath). Patches exist in downstream advisories: Debian/DSA-3746 fixes to GraphicsMagick (e.g., 1.3.20-...

CVE-2016-3062

CVE-2016-3062 affects Libav (libavformat/mov.c: mov_read_dref) and FFmpeg; vulnerable are Libav < 11.7 and FFmpeg

CVE-2016-6834

CVE-2016-6834 affects QEMU (net_tx_pkt_do_sw_fragmentation in hw/net/net_tx_pkt.c). The issue allows a local guest OS administrator to trigger a denial of service by sending a zero-length current fragment length, causing an infinite loop and QEMU process crash. Connected documents confirm this CV...

CVE-2017-12086

CVE-2017-12086 affects Blender (open-source 3D suite). The vulnerability is in the BKE_mesh_calc_normals_tessface function, where parsing a crafted .blend file can trigger an integer overflow that leads to a buffer overflow and potential code execution within the application context. User interac...

CVE-2017-14442

CVE-2017-14442 affects SDL2_image-2.0.2 BMP image rendering, causing a stack overflow that can lead to remote code execution when a specially crafted BMP image is processed. Public sources describe the vulnerability across multiple advisories (Debian DSA-4184-1, Mageia MGASA-2018-0454) and indica...

CVE-2017-15108

CVE-2017-15108 affects spice-vdagent (versions up to 0.17.0). Root cause: improper escaping of the save directory before passing to a shell, enabling a local attacker with access to the agent’s session to inject arbitrary commands. The Debian advisory notes a fix in 0.17.0-1+deb9u1; other open-so...

CVE-2017-15575

CVE-2017-15575 affects Redmine prior to 3.2.6 and 3.3.x prior to 3.3.3. Root cause: Redmine.pm does not verify if the Repository module is enabled in a project’s settings, allowing remote attackers to obtain sensitive diff information (and possibly other impact). Impact: information disclosure. M...

CVE-2017-18238

CVE-2017-18238 affects Exempi (before 2.4.4). The issue lies in TradQT_Manager::ParseCachedBoxes in XMPFiles/source/FormatSupport/QuickTime_Support.cpp, which allows remote attackers to trigger a denial of service (infinite loop) via crafted XMP data in a .qt file. This vulnerability is documente...

CVE-2017-2826

CVE-2017-2826 describes an information-disclosure vulnerability in Zabbix Server 2.4.x where the iConfig proxy request can cause the server to reveal the configuration of any Zabbix proxy. The attacker can trigger this by sending crafted requests from an active Zabbix proxy. The connected documen...

CVE-2017-2904

Blender 2.78c is affected by CVE-2017-2904 due to an exploitable integer overflow in the RADIANCE loading path when processing HDR assets, leading to a buffer overflow and potential code execution if a user opens a crafted .hdr via the sequencer. Publicly documented remediation in connected sourc...

CVE-2017-6305

CVE-2017-6305 affects the ytnef/libytnef library, with issues in decoding TNEF data (winmail.dat) leading to out-of-bounds reads/writes and other memory errors. Public references across multiple distros (Ubuntu USN-3288-1, USN-4615-1, Mageia MGASA-2017-0174, Fedora updates) indicate this family o...

CVE-2017-6927

CVE-2017-6927 affects Drupal 8.4.x before 8.4.5 and 7.x before 7.57. The issue is a flaw in the Drupal.checkPlain() JavaScript escaping function, which fails to sanitize certain HTML injection methods, enabling cross-site scripting under certain circumstances. The PHP HTML escaping functions are ...

CVE-2017-8844

The CVE-2017-8844 issue affects lrzip 0.631 where the read_1g function in stream.c inside liblrzip.so can be exploited by a crafted archive to cause a heap-based buffer overflow, potentially triggering a denial of service or other impact. Public advisories (Debian DLA-2725-1, Ubuntu USN-5171-1/2,...

CVE-2018-10857

CVE-2018-10857 affects the Git-annex project. The vulnerability allows private data exposure by exposing content of files outside the git-annex repository or content from a private web server on localhost or the LAN. Public sources in connected documents indicate that a fix was released in git-an...

CVE-2018-25033

CVE-2018-25033 affects ADMesh up to 0.98.4, where a heap-based buffer over-read occurs in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c of libadmesh.a. This over-read can lead to memory corruption; NVD and downstream advisories describe impact in affected installat...

CVE-2018-6084

CVE-2018-6084 affects Google Chrome on macOS prior to 66.0.3359.117. The underlying issue is unsafe/insufficiently sanitized use of Distributed Objects by the Google Updater, allowing a local attacker to execute arbitrary code via an executable file. Connected sources corroborate the macOS Update...

CVE-2018-7730

CVE-2018-7730 affects Exempi up to version 2.4.4. A specific case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp, causing a heap-based buffer over-read in PSD_MetaHandler::CacheFileData(). Connected documentation confirms the affected file and function a...

CVE-2019-11071

CVE-2019-11071 affects SPIP 3.1.x before 3.1.10 and 3.2.x before 3.2.4, where mishandling of var_memotri enables an authenticated visitor to execute arbitrary code on the host server. The vulnerability is an authenticated RCE with high impact (CVE-3.x reported as high/critical depending on vector...

CVE-2019-18602

OpenAFS is affected by CVE-2019-18602: an information disclosure vulnerability caused by uninitialized scalars sent over the network to a peer. Affected series include OpenAFS before 1.6.24 and 1.8.x before 1.8.5. Debian security notices (DLA-1982-1) and OSV/NVD entries confirm the issue and prov...

CVE-2020-28614

CVE-2020-28614 is an out-of-bounds read and type-confusion code-execution vulnerability in CGAL’s Nef polygon-parsing (Nef_S2/SNC_io_parser.h read_vertex) affecting CGAL-5.1.1. Exploitation relies on crafted input to trigger OOB reads in multiple parser paths. Debian LTS fixes CGAL 4.13-1+deb10u1...

CVE-2020-36659

CVE-2020-36659 affects Apache::Session::Browseable (before 1.3.6) where X.509 certificate validation is not enforced by default for remote LDAP backends due to Net::LDAPS default config. This vulnerability is tied to LemonLDAP::NG and its Apache::Session dependencies; Debian and OpenVAS advisorie...

CVE-2022-3636

CVE-2022-3636 is a Linux kernel vulnerability affecting the function __mtk_ppe_check_skb in drivers/net/ethernet/mediatek/mtk_ppe.c (Ethernet Handler). The issue is a use-after-free in the MTK PPE path, leading to potential corruption or crash. A patch is recommended to fix the issue. The vulnera...

CVE-2023-30631

Apache Traffic Server (ATS) CVE-2023-30631: Improper input validation in the configuration option proxy.config.http.push_method_enabled caused the PUSH method handling to behave unexpectedly, potentially bypassing intended blocks. Affects ATS releases 8.0.0 through 9.2.0. Mitigation: upgrade to 8...

CVE-2024-54028

CVE-2024-54028 is a memory corruption vulnerability in catdoc 0.95, caused by an integer underflow in the OLE Document DIFAT Parser. A specially crafted file can trigger heap-based memory corruption. Reports in Debian/Mageia advisories indicate fixes are available in updated catdoc packages (e.g....