CVE-2018-19475

CVE-2018-19475 affects Artifex Ghostscript prior to 9.26. The root cause is that psi/zdevice2.c fails to check available stack space when the device remains the same, allowing remote attackers to bypass intended access restrictions. The issue is reported as a remote-access/bypass vulnerability in...

CVE-2018-19966

The CVE-2019-19578 entries describe a Xen hypervisor vulnerability up through 4.12.x (affecting x86 PV guests) caused by an incorrect fix for CVE-2017-15595 in the handling of linear pagetables. This allows a malicious or buggy PV guest to trigger a denial of service (host crash) and may enable p...

CVE-2018-20547

CVE-2018-20547 is a vulnerability in libcaca 0.99.beta19 involving an illegal READ memory access in get_rgba_default() within caca/dither.c for 24bpp data. The issue is documented in FreeBSD VuXML as part of the libcaca set of vulnerabilities (CVE-2018-20544..20549) and is reflected in multiple O...

CVE-2018-9516

CVE-2018-9516 affects the Linux kernel HID subsystem: in hid_debug_events_read() of drivers/hid/hid-debug.c there is a possible out-of-bounds write due to missing bounds checks. This can enable local privilege escalation with system-level rights; no user interaction is required. The vulnerability...

CVE-2020-15972

CVE-2020-15972 is a use-after-free in the audio path of Chromium/Google Chrome prior to 86.0.4240.75. The issue could allow a remote attacker to exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution or other impacts as described in the Debian/Arch adviso...

CVE-2020-1740

CVE-2020-1740 is about Ansible Engine Vault editing: on the same host, ansible-vault edit can expose old/new secrets due to mkstemp/two-step write. Connected documents consistently confirm this vulnerability across multiple distributions (Astra Linux, Debian, Fedora/Red Hat, Alpine, Amazon Linux)...

CVE-2020-26418

Wireshark memory leak in the Kafka protocol dissector (affecting Wireshark 3.4.0 and 3.2.0–3.2.8) can cause denial of service via crafted captures or packet injection. The issue is evidenced across multiple public advisories in connected documents (e.g., Debian LTS advisory DLA-2547-1 listing CVE...

CVE-2021-21161

CVE-2021-21161 is a reported heap buffer overflow in the Chromium browser’s TabStrip component, fixed in versions before 89.0.4389.72 (vulnerable prior to that update). The issue allows a remote attacker to potentially cause heap corruption via a crafted HTML page. In practice, updates to Chromiu...

CVE-2021-3933

OpenEXR CVE-2021-3933: an integer overflow can occur when processing crafted images on platforms where size_t

CVE-2022-0368

CVE-2022-0368 affects the Vim/ Vim project, with an out-of-bounds read in vim/vim prior to 8.2. The entry lists a mix of impact indicators (C/H/I/A high/partial) and a CVSS 3.1 base score of 7.8 (LOCAL, HIGH) indicating local access and user interaction is required. The documents do not provide a...

CVE-2022-0696

CVE-2022-0696 is a NULL pointer dereference in Vim. Affected software is vim/vim prior to 8.2.4428. The connected docs confirm this CVE among Vim-related flaws and show patches in Debian/Ubuntu advisories (e.g., DLA-3204-1) and an Ubuntu/Debian security bulletin lineage. Remediation is to update ...

CVE-2022-2132

CVE-2022-2132 is a DoS vulnerability in DPDK caused by a permissive input validation that allows a remote attacker to trigger a denial of service by sending a crafted Vhost header. The issue affects the DPDK component handling Vhost descriptors, where processing of the Vhost header can exhaust mb...

CVE-2022-23833

The CVE affects Django: MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could cause an infinite loop while parsing uploaded files. There is no exploitation detail provided; the impact is a potential denial of service ...

CVE-2022-3235

CVE-2022-3235 affects vim/vim with a Use After Free in versions prior to 9.0.0490. The connected advisories indicate remediation through upgrading Vim to a newer release; multiple sources reference updating to a newer vim package (no explicit fixed version in the Initial Description). If exploiti...

CVE-2022-3705

CVE-2022-3705 affects vim. The vulnerability is in the function qf_update_buffer (file quickfix.c) of the autocmd Handler, causing a use-after-free. It may be triggered remotely. A fix is available in vim 9.0.0805; patch name: d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. Evidence of impact and remed...

CVE-2022-42799

CVE-2022-42799 describes a UI spoofing vulnerability in WebKitGTK/WebKit-based browsers when visiting a malicious site. The Apple OS updates fixed this (tvOS/macOS/iOS/watchOS Safari/WebKit) to mitigate UI spoofing. Connected advisories show WebKitGTK/WebKit fixes: Debian/Ubuntu advisories (CVE-2...

CVE-2023-28856

CVE-2023-28856 affects Redis where an authenticated user can use the HINCRBYFLOAT command to create an invalid hash field that will crash the Redis server on access. The issue is fixed in Redis releases 7.0.11, 6.2.12, and 6.0.19. Affected product: Redis server (in-memory DB with on-disk persiste...

CVE-2023-4903

CVE-2023-4903 concerns Google Chrome on Android before 117.0.5938.62, where Inappropriate implementation in Custom Mobile Tabs allowed a remote attacker to spoof security UI via a crafted HTML page. The linked sources confirm this is a Chromium-derived issue affecting Chrome/Chromium and related ...

CVE-2013-1418

The CVE-2013-1418 issue affects MIT Kerberos 5 (krb5) KDC: when multiple realms are configured, setup_server_realm() can dereference NULL and crash the daemon via a crafted request, causing DoS. Remote unauthenticated access is possible per the description. Public details in connected sources con...

CVE-2014-3616

CVE-2014-3616 affects nginx versions 0.5.6 through 1.7.4. The root cause is reuse of a shared SSL session cache or SSL session_ticket_key for multiple servers, allowing a remote attacker with sufficient privileges to perform a virtual host confusion by reusing a cached SSL session in an unrelated...

CVE-2016-3627

CVE-2016-9596, related to libxml2 used in Red Hat JBoss Core Services, allows a denial of service via crafted XML when in recovery mode. This vulnerability exists because of an incorrect fix for CVE-2016-3627 and results in stack consumption. The issue is specifically described as a DoS (stack gr...

CVE-2017-13194

CVE-2017-13194 affects libvpx used by the Android media framework. The root cause is incorrect validation of odd frame widths in libvpx, enabling denial of service and, in some advisories, potential arbitrary code execution. Affected environments include Android 7.x–8.x and various Linux distribu...

CVE-2017-14867

CVE-2017-14867 affects Git and is caused by unsafe Perl scripts used to support subcommands (notably cvsserver). Vulnerable builds include Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2. The flaw allows an attacker to execute arbitrar...

CVE-2018-1000127

The CVE-2018-1000127 issue affects memcached prior to 1.4.37, caused by an Integer Overflow in items.c:item_free() that can lead to data corruption and deadlocks due to reusing hash-table entries from a free list. It is exploitable over the network to the memcached service. The vulnerability is f...

CVE-2018-16058

Wireshark vulnerability CVE-2018-16058 affects Wireshark 2.6.x, 2.4.x, and 2.2.x; the Bluetooth AVDTP dissector could crash due to an incorrect data-structure initialization. Root cause: a flaw in epan/dissectors/packet-btavdtp.c that failed to properly initialize a data structure. Impact: denial...

CVE-2018-18227

CVE-2018-18227 affects Wireshark where the MS-WSP protocol dissector could crash. Affected ranges are Wireshark 2.6.0–2.6.3 and 2.4.0–2.4.9. Root cause: NULL return values not handled in epan/dissectors/packet-mswsp.c; remediation is upstream patch to properly handle NULLs. In practice, the vulne...

CVE-2018-2678

CVE-2018-2678 affects Oracle Java SE family (Java SE, Java SE Embedded, JRockit) with vulnerable JNDI component. Affected: Java 6u171, 7u161, 8u152, 9.0.1; Java SE Embedded 8u151; JRockit R28.3.16. Description indicates unauthenticated network access could lead to a partial denial of service via ...

CVE-2018-5104

CVE-2018-5104 is a use-after-free in font-face manipulation that can trigger a crash when a font face is freed while still in use. Affected products include Mozilla Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2019-5719

Wireshark vulnerable component: ISAKMP dissector. CVE-2019-5719 (and related CVEs in the bundle) affect Wireshark 2.6.0–2.6.5 and 2.4.0–2.4.11, where the ISAKMP dissector could crash due to not properly handling a missing decryption data block (root cause: missing decryption data). Impact per sou...

CVE-2019-5780

The CVE-2019-5780 entry refers to Google Chrome on macOS with insufficient restrictions on Apple Events before Chrome 72.0.3626.81, allowing a local attacker to execute JavaScript via Apple Events. Affects Chrome versions prior to the 72.0.3626.81 update. Root cause: insufficient restriction of A...

CVE-2020-15961

CVE-2020-15961 describes insufficient policy validation in Chrome extensions, enabling a sandbox escape via a crafted extension. The issue affects Google Chrome/Chromium prior to 85.0.4183.121, where an attacker could persuade a user to install a malicious extension to bypass sandbox restrictions...

CVE-2020-6555

CVE-2020-6555 affects Google Chrome/Chromium WebGL. The vulnerability is an out-of-bounds read in WebGL that could allow a remote attacker to read potentially sensitive data from a process memory via a crafted page, prior to Chrome version 84.0.4147.125. Affected products include Chrome/Chromium ...

CVE-2021-21204

CVE-2021-21204 is a use-after-free in Blink/WebKit reported for Google Chrome on macOS before 90.0.4430.72, allowing remote heap corruption via a crafted HTML page. The issue is confirmed across multiple vendor advisories (Debian, Fedora, Alpine, Astra Linux) and is addressed by updating to Chrom...

CVE-2021-4069

CVE-2021-4069 affects Vim with a Use-After-Free vulnerability. Public advisories (CBL-Mariner entry) note vim versions less than 8.2.4081-1 are affected; upgrading to 8.2.4081-1 or newer mitigates the issue. Other notices reiterate vim use-after-free variants. No exploit details are provided in t...

CVE-2022-2057

CVE-2022-2057 is a Divide By Zero flaw in libtiff's tiffcrop affecting libtiff 4.4.0. Connected advisories confirm the issue and list the fix patch (commit f3a5e010) and ongoing updates across distributions (Debian, AlmaLinux, Alt Linux, cloud/packs). Affected component: tiffcrop within libtiff; ...

CVE-2022-23036

The Connected Astra Linux entries provide concrete details for CVEs 2022-23036 to 2022-23042 and related entries, describing a shared vulnerability class in Linux PV device frontends. Specifically, blkfront, netfront, scsifront, and the gntalloc driver use grant-table interfaces to remove backend...

CVE-2022-23094

Summary (CVE-2022-23094) Libreswan versions 4.2–4.5 are affected by a denial-of-service issue triggered by a malformed IKEv1 packet, caused by pluto/ikev1.c assuming a state object exists. This can lead to a NULL pointer dereference and daemon crash. The issue is fixed in version 4.6. Impact and ...

CVE-2022-41849

CVE-2022-41849 affects the Linux kernel, specifically drivers/video/fbdev/smscufx.c, where a race between ufx_ops_open and ufx_usb_disconnect can cause a use-after-free if a nearby attacker unplugs a USB device during open(). The vulnerability is locally exploitable with physical access and has a...

CVE-2023-3180

CVE-2023-3180 affects the QEMU virtio-crypto implementation. The vulnerability arises from not checking src_len vs dst_len in virtio_crypto_sym_op_helper, enabling a heap buffer overflow during encryption/decryption requests via virtio_crypto_handle_sym_req. Public references (Debian, CNVD, CNAs)...

CVE-2023-4900

CVE-2023-4900 affects Google Chrome/Chromium family (Android Chrome prior to 117.0.5938.62) where an inappropriate implementation in Custom Tabs allows a remote attacker to obfuscate a permission prompt via a crafted HTML page. Connected advisories indicate this is one of multiple Chromium issues...

CVE-2023-5473

CVE-2023-5473 affects Google Chrome/Chromium Cast: Use-after-free in Cast prior to 118.0.5993.70 allows a renderer-compromised remote attacker to potentially cause heap corruption via a crafted HTML page (Chromium severity: Low). Public disclosures and advisories in connected documents confirm th...

CVE-2023-5474

CVE-2023-5474 corresponds to a heap buffer overflow in PDF handling in Google Chrome/Chromium before 118.0.5993.70. A remote attacker could exploit this by convincing a user to perform specific interactions with a crafted PDF, potentially causing heap corruption. Public advisories reference Chrom...

CVE-2024-35866

CVE-2024-35866: Linux kernel SMB CIFS client use-after-free in cifs_dump_full_key() addressed by skipping sessions tearing down (status == SES_EXITING) to prevent UAF. Connected docs confirm this fix and list multiple downstream advisories (e.g., ALAS2KERNEL, ALAS2023, Debian DLA-4193-1) referenc...

CVE-2024-35867

CVE-2024-35867 pertains to the Linux kernel SMB client. The vulnerability arises from a potential use-after-free in cifs_stats_proc_show(), mitigated by skipping sessions that are tearing down (status SES_EXITING) to prevent UAF. The fix resolves a local-attack scenario with high impact on confid...

CVE-2025-37738

CVE-2025-37738 details from Connected docs show a Linux kernel ext4 vulnerability: ext4_xattr_inode_dec_ref_all may read past the end while processing xattrs, leading to a slab-use-after-free as reported by KASAN. The fix makes ext4_xattr handling ignore xattrs entries beyond the end, preventing ...

CVE-2015-3167

Summary: CVE-2015-3167 affects PostgreSQL contrib/pgcrypto; when an incorrect key is used, it returns different error messages, enabling possible key exposure via brute force. The issue affects multiple branches and versions prior to fixed releases. Root cause: inconsistent error responses in pgc...

CVE-2016-3074

CVE-2016-3074 is a heap-based buffer overflow in GD Graphics Library (libgd/libgd2) caused by a signedness error when processing crafted compressed gd2 data. The vulnerability can lead to a crash or potentially remote code execution. Affected software centers on libgd2/gd2 components (GD library,...

CVE-2017-5462

The CVE-2017-5462 issue is a DRBG generation flaw in the NSS library where the internal state V does not correctly carry bits over. This vulnerability affects Mozilla products including Thunderbird (<52.1), Firefox ESR (<52.1), Firefox (

CVE-2018-14353

CVE-2018-14353 is an integer underflow in the function imap_quote_string in imap/util.c , affecting Mutt < 1.10.1 and NeoMutt

CVE-2018-17100

LibTIFF 4.0.9 contains an int32 overflow in multiply_ms within tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly other impact when processing crafted image files. This CVE (CVE-2018-17100) has been acknowledged in multiple advisories (Debian DSA-4670, Red Hat/CentOS adviso...