CVE-2022-24806

Net-snmp vulnerability CVE-2022-24806: improper input validation when SETing malformed OIDs in master agent and subagent can be triggered prior to version 5.9.2. Affected: net-snmp tools/agent; fix: upgrade to 5.9.2 or later. Mitigation note: use strong SNMPv3 credentials and avoid sharing them; ...

CVE-2023-2124

CVE-2023-2124 is an out-of-bounds memory access flaw in the Linux kernel XFS image restore path after failure with a dirty log journal. It can crash a local user or potentially escalate privileges when mounting/correcting a corrupted XFS disk image. Public advisories (e.g., Debian DSA-5448-1 and ...

CVE-2014-3487

CVE-2014-3487 is a vulnerability in PHP’s Fileinfo (cdf_read_property_info in cdf.c) where the Fileinfo component fails to validate a stream offset in CDF files. A crafted CDF file can cause a DoS (application crash) on PHP builds using file before 5.19, specifically affecting PHP 5.4.30 and 5.5....

CVE-2018-1049

CVE-2018-1049 describes a race condition in systemd prior to version 234 between .mount and .automount units, where automount requests from the kernel may not be serviced, causing the mountpoint to hang for affected processes and leading to denial of service. Connected advisories and Nessus plugi...

CVE-2018-12405

The CVE-2018-12405 entry is supported by connected advisories showing memory safety bugs in Firefox 63/ESR 60.3 with potential for arbitrary code execution. Affected products include Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox

CVE-2018-14882

CVE-2018-14882 affects tcpdump before 4.9.3, with a buffer over-read in the ICMPv6 parser (print-icmp6.c). This can cause a crash or, in some contexts, enable arbitrary code execution as part of the suite of tcpdump issues. The linked advisory (tcpdump updates 4.9.3) and Cloud Foundry USN note th...

CVE-2019-10220

CVE-2019-10220 affects the Linux kernel CIFS implementation when using kernel version 4.9.0, which is vulnerable to a relative path injection in directory entry lists. The connected Nessus advisories corroborate that this CVE is referenced in multiple advisory plugins, describing the affected com...

CVE-2019-17542

CVE-2019-17542 is a heap-based buffer overflow in FFmpeg’s vqa_decode_chunk (out-of-array access in vqa_decode_init, libavcodec/vqavideo.c). Multiple advisories confirm the issue and fixes; affected FFmpeg releases prior to the patched version are vulnerable. Mitigation: upgrade FFmpeg to a relea...

CVE-2019-19951

CVE-2019-19951 affects GraphicsMagick; the issue is a heap-based buffer overflow in ImportRLEPixels() within coders/miff.c (GraphicsMagick 1.4 snapshot-20190423 Q8). Reports in connected documents confirm a heap-based overflow in ImportRLEPixels and document fixes: Mageia MGASA-2020-0102 notes th...

CVE-2019-7636

SDL (Simple DirectMedia Layer) is affected by CVE-2019-7636 across SDL 1.2.15 and SDL 2.x up to 2.0.9, due to a heap-based buffer over-read in SDL_GetRGB located in video/SDL_pixels.c. The connected advisories describe broader SDL issues (multiple CVEs in audio and video paths) and indicate an at...

CVE-2020-26934

CVE-2020-26934 affects phpMyAdmin prior to 4.9.6 and 5.x prior to 5.0.3, allowing cross-site scripting through the transformation feature when a crafted link is visited. The issue is documented across multiple advisories confirming an XSS payload via the transformation UI. Remediation shown in co...

CVE-2020-6495

CVE-2020-6495 refers to an insufficient policy enforcement vulnerability in Google Chrome’s Developer Tools prior to 83.0.4103.97. The issue, identified in multiple sources (CNVD-2020-32320; Arch Linux ASA-202006-3; Debian/ Gentoo advisories), enables a threat actor to exploit a crafted Chrome ex...

CVE-2021-33656

CVE-2021-33656 affects the Linux kernel: setting a font with malicious data via the PIO_FONT ioctl can cause a memory out-of-bounds write. Affected: kernel font handling path; root cause: out-of-bounds write in ioctl processing. Impact: local code execution is not explicitly stated; exploitation ...

CVE-2022-0261

CVE-2022-0261 is a Vim heap-based buffer overflow affecting vim/vim prior to 8.2. Connected advisories (Astra Linux, Cloud Foundry USN, and Apple security page) confirm Vim heap-buffer issues across multiple CVEs and list Vim updates as the remediation path. For CVE-2022-0261, the vendor-provided...

CVE-2022-48281

CVE-2022-48281 affects LibTIFF (tools/tiffcrop.c) with a heap-based buffer overflow exposed by crafted TIFF images. The issue is described for LibTIFF up to version 4.5.0 (processCropSelections in tiffcrop.c). Impact is a potential crash or memory corruption due to a near-write of excessive size ...

CVE-2024-36886

CVE-2024-36886 is a Linux kernel TIPC UAF (tipc_buf_append error path) that can lead to remote code execution. A fix was implemented in the kernel, addressing a use-after-free in TIPC message reassembly (tipc_buf_append path). Affected systems require applying a kernel update that includes the pa...

CVE-2016-2338

CVE-2016-2338 describes an exploitable heap overflow in Ruby’s Psych::Emitter.start_document where head is allocated based on the tags array length; specially crafted objects in tags can cause the allocation to exceed bounds. Connected advisories confirm this vulnerability and show the fix in Rub...

CVE-2017-10115

CVE-2017-10115 is a covert timing-channel vulnerability in the DSA implementation of the JCE in OpenJDK/OpenJRE/JRockit, affecting Java SE 6u151, 7u141, 8u131 and related packages (e.g., OpenJDK 7 on Debian/Ubuntu, RHEL/CentOS, Arch Linux advisories). A remote attacker could potentially exploit t...

CVE-2018-14881

CVE-2018-14881 concerns the BGP parser in tcpdump prior to 4.9.3. The issue is a buffer over-read in print-bgp.c:bgp_capabilities_print() when handling BGP_CAPCODE_RESTART. Affected product: tcpdump (and related tcpdump/libpcap stack) with versions before 4.9.3. Consequences stated in sources ind...

CVE-2018-16230

tcpdump's CVE-2018-16230 affects the BGP parser in tcpdump prior to version 4.9.3, caused by a buffer over-read in print-bgp.c:bgp_attr_print() for MP_REACH_NLRI. Impact is described as a potential crash/denial of service with high-severity CVSS vectors in multiple advisories. The publicly known ...

CVE-2018-6913

CVE-2018-6913 is a heap-based buffer overflow in the pack function of Perl prior to 5.26.2. The overflow is context-dependent and can allow an attacker to execute arbitrary code. Affected software is Perl, with the vulnerability arising from how pack handles a large item count. The issue is confi...

CVE-2019-12098

CVE-2019-12098 affects Heimdal Kerberos 5 clients; the issue is failure to verify anonymous PKINIT KX (PA-PKINIT-KX) during the key exchange, enabling potential MITM. Public advisories indicate this was fixed in newer Heimdal releases (e.g., 7.6.0+ and later such as 7.7.0 in openSUSE/SUSE bundles...

CVE-2019-20421

Exiv2 0.27.2 contains a vulnerability in Jp2Image::readMetadata() where processing certain input files can loop indefinitely, consuming CPU and enabling a remote DoS via a crafted file. Public advisories from Debian, AlmaLinux, Alpine, Mageia and others indicate fixed releases in or after 0.27.2;...

CVE-2019-20485

CVE-2019-20485 affects libvirt’s qemu_driver.c, where libvirt before version 6.0.0 mishandles holding a monitor job during a guest-agent query, enabling a denial of service (API blockage). Connected advisories corroborate the issue across multiple distributions (e.g., Astra Linux, Amazon Linux 2,...

CVE-2020-36181

Consolidated evidence shows CVE-2020-36181 affects FasterXML jackson-databind 2.x before 2.9.10.8. The vulnerability arises from mishandling the interaction between serialization gadgets and typing, specifically related to DriverAdapterCPDS classes (notably org.apache.tomcat.dbcp.dbcp.cpdsadapter...

CVE-2020-6448

CVE-2020-6448 is a use-after-free in the V8 JavaScript engine used by Google Chrome (Chromium). The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page. Public details identify the vulnerability as part of the Chrome/Chromium 81.x timeframe, with fixes shipped i...

CVE-2020-6461

CVE-2020-6461: A use-after-free in Chrome storage prior to 81.0.4044.129 could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. Affected: Google Chrome (storage subsystem); root cause: use-after-free. Impact: sandbox escape; exploit status not detailed i...

CVE-2020-6513

CVE-2020-6513 is documented in multiple sources as a heap buffer overflow in PDFium affecting Chromium/Google Chrome. Connected documents confirm it was among a set of Chromium vulnerabilities addressed in updates, with Debian's DSA-4824-1 noting fixes in Chromium 87.0.4280.88 for the buster rele...

CVE-2021-21285

CVE-2021-21285 affects Docker dockerd when pulling an intentionally malformed Docker image manifest, causing a crash/denial of service. Affected are Docker versions prior to 9.03.15 and 20.10.3; patches exist in 19.03.15 and 20.10.3 to prevent the daemon from crashing. Connected sources also refe...

CVE-2021-4043

CVE-2021-4043 affects GPAC (gpac/gpac) prior to 1.1.0, caused by a NULL pointer dereference in the code. Findings across connected sources indicate potential for Denial of Service and, per some assessments, the possibility of arbitrary code execution. Remediation guidance varies by source; Debian...

CVE-2021-43859

XStream Java library (versions before 1.4.19) is vulnerable to a remote DoS via crafted input streams that can cause 100% CPU, depending on CPU type/parallelism. The fix is upgrading to XStream 1.4.19, which monitors element-adding times and throws an exception when a threshold is exceeded; a NO_...

CVE-2022-27447

CVE-2022-27447 affects MariaDB Server v10.9 and earlier, with a use-after-free in Binary_string::free_buffer() (sql/sql_string.h) that can trigger crashes/segmentation faults. Multiple connected advisories reference the same issue (notably MariaDB server crash scenarios and use-after-free in Bina...

CVE-2022-39348

CVE-2022-39348 (Twisted) affects the Twisted event-based framework for internet applications. When the host header does not match a configured host (twisted.web.vhost.NameVirtualHost), NoResource is returned and the Host header is unescaped in the 404, enabling HTML and script injection. The issu...

CVE-2023-5171

CVE-2023-5171 describes a use-after-free in the Ion compiler’s garbage collection that could allow memory corruption and a potentially exploitable crash, by allowing an attacker to write two NUL bytes. Affected products include Firefox and Thunderbird: Firefox ≤ 117.x (with ESR ≤ 115.3) prior to ...

CVE-2025-21605

CVE-2025-21605 affects Redis where, in versions starting at 2.6 and before 7.4.3, an unauthenticated client can cause unlimited growth of the output buffer, exhausting memory and potentially crashing the server. The issue occurs because Redis’ default client-output-buffer-limit does not cap norma...

CVE-2017-2636

CVE-2017-2636 details (NORMAL mode) : A race condition in the Linux kernel N_HLDC driver (n_hdlc) can lead to a double free. A local, unprivileged user who sets the HDLC line discipline on a tty device could exploit this to escalate privileges or cause a denial of service (system crash). Exploita...

CVE-2017-7645

The CVE-2017-7645 issue affects the Linux kernel NFSv2/v3 server (nfsd) and is triggered by processing long RPC replies. The root cause is an out-of-bounds memory access in the NFS server paths (net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, fs/nfsd/nfsxdr.c) that can lead to a system crash (DoS). Affected...

CVE-2018-1000888

CVE-2018-1000888 affects the PEAR Archive_Tar library (versions 1.4.3 and earlier). The vulnerability arises from unsafe file operations using $v_header['filename'] during extract, which can trigger phar:// based unserialization. This enables PHP object injection and can lead to destructor/wakeup...

CVE-2018-18021

CVE-2018-18021 affects arch/arm64/kvm/guest.c in the Linux kernel before 4.18.12. The KVM_SET_ON_REG ioctl is mishandled, allowing a local attacker who can create VMs to arbitrarily redirect the hypervisor flow of control (full register control) and potentially cause a hypervisor panic via an ill...

CVE-2018-2814

CVE-2018-2814 affects Java SE/Java SE Embedded (Hotspot). Affected: Java SE 6u181, 7u171, 8u162, 10; Java SE Embedded 8u161. The vulnerability allows network-based, unauthenticated access to compromise Java SE/Embedded with user interaction required, potentially leading to takeover. Underlying is...

CVE-2018-5814

CVE-2018-5814 : Linux Kernel before 4.16.11, 4.14.43, 4.9.102, and 4.4.133 has race condition vulnerabilities in USB handling (probe, disconnect, rebind) that can trigger use-after-free or NULL dereference via multiple USB over IP packets. Fixes were released in kernel updates: 4.16.11, 4.14.43, ...

CVE-2019-19012

CVE-2019-19012 affects Oniguruma 6.x (before 6.9.4_rc2). The root cause is an integer overflow in regexec.c: search_in_range uses sch_range += reg->dmax, which can overflow on 32-bit builds and lead to an out-of-bounds read. This allows remote attackers to cause denial of service or informatio...

CVE-2019-3813

Spice versions 0.5.2–0.14.1 are affected by an off-by-one in memslot_get_virt causing an out-of-bounds read. Root consequences include possible denial of service and, in the worst case, remote code execution by unauthenticated attackers. Public advisories confirm fixes: Arch Linux and Red Hat adv...

CVE-2019-5756

CVE-2019-5756 is a use-after-free in the pdfium library used by Chromium/Chrome, caused by inappropriate memory management when caching. It could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Affected products include Google Chrome/Chromium and the p...

CVE-2019-5763

CVE-2019-5763 is a vulnerability in Google's V8 engine used by Chrome/Chromium, arising from a failure to check error conditions. This could allow a remote attacker to trigger heap corruption via a crafted HTML page, with impact described as partial confidentiality/integrity/availability in the C...

CVE-2019-5777

The CVE-2019-5777 entry concerns Google Chrome’s Omnibox where an incorrect handling of a confusable character allowed a remote attacker to spoof the URL bar with a crafted domain name, affecting Chrome prior to version 72.0.3626.81. The underlying issue is in the Omnibox domain-name processing (...

CVE-2019-5805

CVE-2019-5805 involves a use-after-free in the PDFium component of the Chromium/Google Chrome stack, prior to version 74.0.3729.108. The vulnerability could permit a remote attacker to potentially execute heap corruption via a crafted PDF file. Affected products include Google Chrome/Chromium (de...

CVE-2020-11026

CVE-2020-11026 affects WordPress; vulnerable in affected versions where uploading files with specially crafted names to Media can trigger script execution when the file is accessed. The issue requires an authenticated user with upload privileges. A patch was issued in WordPress 5.4.1, and all pre...

CVE-2020-13659

CVE-2020-13659 affects QEMU 4.2.0: address_space_map in exec.c can trigger a NULL pointer dereference related to BounceBuffer. Impact is low (partial availability, local access). Remediation across connected sources includes upgrading QEMU to newer releases where fixes are shipped (e.g., Debian s...

CVE-2020-6382

CVE-2020-6382 affects Chromium/Chrome before version 80.0.3987.87, caused by a type confusion in the v8 JavaScript engine. This vulnerability can enable a remote attacker to potentially execute arbitrary code through a crafted HTML page, with heap corruption as a possible consequence. Publicly re...