CVE-2020-9431

Wireshark LTE RRC dissector memory leak CVE-2020-9431 affects Wireshark versions 3.2.0–3.2.1, 3.0.0–3.0.8, and 2.6.0–2.6.14. Root cause: memory leak from certain append operations in epan/dissectors/packet-lte-rrc.c. Remediation: code fix adjusted the append operations to prevent leaks. Connected...

CVE-2017-5029

CVE-2017-5029 affects libxslt 1.1.29 and is used by Blink/Chrome. The issue is an integer overflow in xsltAddTextString during a size calculation, enabling a remote attacker to cause an out-of-bounds memory write via a crafted HTML page. Connected records corroborate the libxslt involvement and i...

CVE-2018-1000116

NET-SNMP is affected by CVE-2018-1000116 (reported as memory/heap corruption in the net-snmp PDU parsing path). The issue is described as a heap corruption vulnerability triggered when parsing the PDU prior to authentication, enabling a remote attacker to crash snmpd or potentially execute arbitr...

CVE-2018-10845

CVE-2018-10845 affects GnuTLS HMAC-SHA-384 and enables a Lucky Thirteen–style timing side-channel leading to potential plaintext recovery. The connected IBM advisories confirm remote exploitation via crafted packets to obtain information, with MEDIUM base scores and impact on confidentiality. Rem...

CVE-2018-10882

CVE-2018-10882 affects the Linux kernel ext4 implementation. A local user can trigger an out-of-bounds write in fs/jbd2/transaction.c by mounting/unmounting a crafted ext4 image, causing denial of service and potential system crash. Public details describe the vulnerability as part of ext4 file-s...

CVE-2018-16056

Wireshark CVE-2018-16056 affects multiple branches of Wireshark where the Bluetooth Attribute Protocol dissector could crash. The issue arises from an input validation gap when handling UUID-specific dissectors; the fix is implemented in epan/dissectors/packet-btatt.c by validating that a dissect...

CVE-2018-5117

CVE-2018-5117 describes a URL spoofing issue where, when right-to-left text is used in the address bar with left-to-right alignment, the displayed URL can be scrolled to mislead users about the actual site. The vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2019-7149

CVE-2019-7149 affects elfutils 0.175 (libdw) where read_srclines.c contains a heap-based buffer over-read that can trigger segmentation faults and denial of service when processing crafted input. The issue is documented across multiple advisories (e.g., ALAS2-2019-1337, ASA-201903-9, CentOS/RHEL ...

CVE-2020-12865

SANE Backends CVE-2020-12865 describes a heap buffer overflow in SANE Backends before 1.0.30 that lets a malicious device on the same local network execute arbitrary code. Affected component: sane-backends (likely epsonds/esci2_img related paths) with exploitation possible without user interactio...

CVE-2020-14401

CVE-2020-14401 affects LibVNCServer up to version 0.9.12; the vulnerability is in libvncserver/scale.c where a pixel_value integer overflow occurs. Connected sources (EulerOS/SUSE/Nessus references) enumerate this CVE among a set of LibVNCServer issues, with the common remediation context implyin...

CVE-2020-15964

CVE-2020-15964 is a Chrome/Chromium vulnerability affecting the media component (V8) with a pre-85.0.4183.121 build. The issue is described as an out-of-bounds write in V8 that could enable remote arbitrary code execution, tied to heap corruption in crafted HTML pages. Multiple connected advisori...

CVE-2020-15970

CVE-2020-15970 is a Use-after-free in the NFC component of the Chromium/Google Chrome browser before 86.0.4240.75. Public sources in Debian/Arch/Fedora/FreeBSD describe it as a remote issue where an attacker who can cause renderer compromise could potentially escape the sandbox via a crafted HTML...

CVE-2020-16305

Ghostscript vulnerability CVE-2020-16305: A buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c of Ghostscript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF. Impact is DoS as described; upgrading to Ghostscript 9.51 fixes the issue. The CVE entry expli...

CVE-2020-22021

CVE-2020-22021 is a buffer overflow vulnerability in FFmpeg 4.2, specifically in filter_edges (libavfilter/vf_yadif.c). A remote attacker could trigger a Denial of Service. Public documents consistently reference FFmpeg 4.2 as affected and show advisories/patches urging upgrade of FFmpeg componen...

CVE-2020-28473

CVE-2020-28473 affects the bottle Python package (versions before 0.12.19). The underlying issue is parameter cloaking: if an attacker uses semicolon to separate query parameters, the proxy and server may interpret the request differently, causing malicious requests to be cached as safe. This ena...

CVE-2020-4046

CVE-2020-4046 affects WordPress: low-privilege users can abuse the embed block to inject unfiltered HTML in the block editor, enabling script execution when viewed by a higher-privilege user. Impact is described as editor/wp-admin script execution. The issue has been patched in WordPress 5.4.2 an...

CVE-2020-6383

CVE-2020-6383 is a type confusion in Google Chrome's V8 engine that could allow a remote attacker to cause heap corruption via a crafted HTML page. The initial entry notes Chrome versions prior to 80.0.3987.116 were affected. The connected Chrome update (Stable Channel Update for Desktop) confirm...

CVE-2020-6432

CVE-2020-6432 : Affected software is Chromium/Google Chrome prior to 81.0.4044.92. Description: an insufficient policy enforcement in navigations vulnerability could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. Impact per documents: potential bypass of naviga...

CVE-2020-6518

CVE-2020-6518: Use-after-free in Google Chrome’s developer tools prior to 84.0.4147.89, enabling a remote attacker who entices a user to use devtools to potentially trigger heap corruption via a crafted HTML page. Affected product: Google Chrome (Developer Tools). Root cause: use-after-free in de...

CVE-2021-39258

CVE-2021-39258 affects NTFS-3G prior to 2021.8.22, causing out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find when processing a crafted NTFS image. Public references list the issue in NTFS-3G and note that upgrading to version 2021.8.22 or later resolves the vulnerability. Connecte...

CVE-2021-44420

CVE-2021-44420 affects Django versions: 2.2 prior to 2.2.25, 3.1 prior to 3.1.14, and 3.2 prior to 3.2.10. The issue allows HTTP requests for URLs with trailing newlines to bypass upstream access control based on URL paths. The practical impact is potential unintended access control bypass in aff...

CVE-2022-1616

CVE-2022-1616 affects Vim/Vim in versions prior to 8.2.4895. The issue is a use-after-free in the function append_command in the vim/vim GitHub repository, which can crash the application, bypass protection mechanisms, modify memory, and potentially enable remote code execution. The advisory note...

CVE-2022-24761

CVE-2022-24761 affects Waitress (Python WSGI server) up to version 2.1.0. The advisory describes two vulnerability classes that enable HTTP request smuggling when Waitress runs behind a proxy that does not fully validate RFC7230: (1) parsing integers with Python int(), allowing +10 to be treated ...

CVE-2022-27380

CVE-2022-27380 affects MariaDB Server (component: my_decimal::operator=) and was observed in v10.6.3 and below, where crafted SQL statements can trigger a Denial of Service. Connected advisories confirm the issue and reference MariaDB crash via my_decimal::operator= as the root cause. Remediation...

CVE-2023-2466

CVE-2023-2466 describes an Inappropriate implementation in Prompts in Google Chrome (Chromium) prior to 113.0.5672.63 that allows a remote attacker to spoof the contents of the security UI via a crafted HTML page. Connected sources confirm Chromium/Chrome prompt-related weaknesses with this CVE a...

CVE-2023-38802

CVE-2023-38802 affects FRRouting FRR 7.5.1–9.0 and Pica8 PICOS 4.3.3.2. A remote attacker can cause a denial of service by sending a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation). Underlying cause is improper handling in BGP UPDATE processing. Impact is DoS; CVSS v3.1 ba...

CVE-2023-4569

CVE-2023-4569 – Linux kernel nf_tables memory leak : A memory leak is triggered by nft_set_catchall_flush in net/netfilter/nf_tables_api.c. Several connected advisories describe this as a local issue that can leak memory when catchall elements are deactivated. Affected software is the Linux kerne...

CVE-2023-4904

CVE-2023-4904 affects Google Chrome and Chromium-based derivatives, due to insufficient policy enforcement in the Downloads module. The issue allowed a remote attacker to bypass enterprise policy restrictions via a crafted download, enabling policy circumvention without requiring local privileges...

CVE-2024-26906

CVE-2024-26906 : In the Linux kernel, x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault(). A bpf program reading the vsyscall page with bpf_probe_read_kernel() can trigger copy_from_kernel_nofault(), which calls __get_user_asm() and may fault because the vsyscall page is not readab...

CVE-2010-4657

CVE-2010-4657 affects PHP5 prior to 5.4.4. The flaw allows passing invalid UTF-8 strings to xmlTextWriterWriteAttribute, which are misparsed by libxml2, causing a memory leak in the produced output. The vulnerability is triggered through the attribute-writing path and is not described as exploita...

CVE-2011-4362

CVE-2011-4362 affects lighttpd: a signedness error in the base64_decode routine used by HTTP authentication (http_auth.c) can trigger an out-of-bounds read with a negative index, allowing a remote attacker to cause a denial of service (segmentation fault). Impacted versions are lighttpd 1.4 befor...

CVE-2016-5180

CVE-2016-5180 describes a heap-based buffer overflow in c-ares (versions 1.x before 1.12.0) in the ares_create_query function when a hostname with an escaped trailing dot is processed. This can lead to a denial of service or possibly remote code execution. The issue is triggered by incorrect stri...

CVE-2017-6832

CVE-2017-6832 affects Audio File Library (audiofile) up to version 0.3.6, with a heap-based buffer overflow in MSADPCM.cpp:decodeBlock that can cause a remote crash via a crafted file (denial of service). Public advisories confirm multiple vendors released fixes (e.g., Debian DSA/SEC, ALAS/Cloud ...

CVE-2017-7610

CVE-2017-7610 refers to a vulnerability in elfutils 0.168 where the check_group function in elflint.c can be triggered by a crafted ELF file to cause a heap-based buffer over-read and application crash. The initial description states the vulnerability and impact; no connected documents provide ad...

CVE-2017-7611

CVE-2017-7611 affects Elfutils 0.168, where the check_symtab_shndx function in elflint.c is vulnerable to a heap-based buffer over-read via a crafted ELF file, leading to denial of service (application crash). The Connected documents also describe related ELF utils DoS variants (e.g., 2017-7612/7...

CVE-2018-10120

CVE-2018-10120 affects LibreOffice: SwCTBWrapper::Read in sw/source/filter/ww8/ww8toolbar.cxx does not validate a customizations index, enabling a heap-based buffer overflow when opening crafted Word records. Affected versions are LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1. Impact per desc...

CVE-2018-12385

CVE-2018-12385 describes a potentially exploitable crash in TransportSecurityInfo used for SSL, triggered by data stored in the local cache within the user profile. Affected products include Thunderbird < 60.2.1, Firefox ESR < 60.2.1, and Firefox

CVE-2018-12599

CVE-2018-12599 (ImageMagick) : In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow an attacker to cause an out-of-bounds write via a crafted BMP file. The risk described in public advisories is the memory/write corruption potential, with no in-document details on expl...

CVE-2018-18225

Wireshark 2.6.0–2.6.3 vulnerable via CoAP dissector (packet-coap.c) due to incorrect piv length computation, causing crashes and potential denial of service. Remediation: upgrade to fixed releases (Wireshark 2.6.4+; Debian notes 2.6.5-1 for stretch; Arch/Linux advisories show 2.6.4 fixes). The is...

CVE-2019-17533

CVE-2019-17533 affects MATIO 1.5.17: Mat_VarReadNextInfo4 in mat4.c omits a ‘\0’ and can cause a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed. The issue is acknowledged across multiple advisories: Debian DLA-2267-1, Ubuntu USN-5185-1, Mageia MGASA-2020-0299,...

CVE-2019-5780

The CVE-2019-5780 entry refers to Google Chrome on macOS with insufficient restrictions on Apple Events before Chrome 72.0.3626.81, allowing a local attacker to execute JavaScript via Apple Events. Affects Chrome versions prior to the 72.0.3626.81 update. Root cause: insufficient restriction of A...

CVE-2020-11041

CVE-2020-11041 affects FreeRDP up to and including 2.0.0, where an outside controlled array index is used unchecked for sound backend configuration (alsa, oss, pulse, etc.). This can cause a client crash and may lead to a session disconnect or distorted sound. A fix is available in 2.1.0; if upgr...

CVE-2020-15966

CVE-2020-15966 refers to Google Chrome where insufficient policy enforcement in extensions prior to 85.0.4183.121 could allow a user-driven attacker to obtain potentially sensitive information by convincing a user to install a malicious extension. Public disclosures in Debian/Arch/Fedora security...

CVE-2020-6539

CVE-2020-6539 refers to a use-after-free in CSS handling in Google Chrome prior to 84.0.4147.105, enabling potential remote code execution via a crafted HTML page. The vulnerability affects Chrome’s CSS engine and could allow heap corruption leading to arbitrary code execution, with impact descri...

CVE-2020-6549

CVE-2020-6549 : Use-after-free in Chrome’s media subsystem (pre-84.0.4147.125) can allow a remote attacker to exploit heap corruption via a crafted HTML page. Affected: Google Chrome (media component). Root cause: use-after-free. Impact per sources: arbitrary code execution, information disclosur...

CVE-2020-6556

CVE-2020-6556 describes a heap buffer overflow in the SwiftShader component of Google Chrome/Chromium prior to version 84.0.4147.135, enabling remote exploitation of heap corruption via a crafted HTML page. The issue affects the SwiftShader path in Chrome/Chromium and could lead to arbitrary code...

CVE-2020-7045

Wireshark 3.0.x before 3.0.8 contains a vulnerability in the BT ATT dissector that could cause a crash. The root cause is related to opcode validation in the BT ATT dissector code path (epan/dissectors/packet-btatt.c). Affected product: Wireshark 3.0.x; vulnerable version range includes before 3....

CVE-2021-21190

CVE-2021-21190 affects the PDFium component in Google Chrome prior to 89.0.4389.72, where uninitialized data in PDFium could allow a remote attacker to glean potentially sensitive information from a process’s memory via a crafted PDF file. The connected advisories confirm the issue and note the v...

CVE-2021-26117

CVE-2021-26117 describes an LDAP authentication weakness in the optional ActiveMQ LDAP login module where anonymous access can bypass password verification. Connected sources confirm affected lines: Apache ActiveMQ Artemis prior to 2.16.0 and Apache ActiveMQ prior to 5.16.1 and 5.15.14. Debian/Ub...

CVE-2021-3713

CVE-2021-3713 is an out-of-bounds write in QEMU’s UAS (USB Attached SCSI) device emulation prior to 6.2.0-rc0, where the guest-supplied stream number is not checked, allowing out-of-bounds access to UASDevice->data3 and UASDevice->status3. This can crash QEMU or potentially enable code exec...