CVE-2020-16117

CVE-2020-16117 affects GNOME evolution-data-server, prior to 3.35.91. A malicious server can crash the mail client by sending an invalid CAPABILITY line during a connection, causing a NULL pointer dereference in the imapx_free_capability/imapx_connect_to_server path. The issue is a client-side cr...

CVE-2020-16305

Ghostscript vulnerability CVE-2020-16305: A buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c of Ghostscript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF. Impact is DoS as described; upgrading to Ghostscript 9.51 fixes the issue. The CVE entry expli...

CVE-2020-6556

CVE-2020-6556 describes a heap buffer overflow in the SwiftShader component of Google Chrome/Chromium prior to version 84.0.4147.135, enabling remote exploitation of heap corruption via a crafted HTML page. The issue affects the SwiftShader path in Chrome/Chromium and could lead to arbitrary code...

CVE-2020-8518

CVE-2020-8518 is an RCE in Horde Groupware Webmail Edition 5.2.22 via CSV data import, caused by arbitrary PHP code injection in the Horde_Data component. The vulnerability allows authenticated users to execute code on the server hosting the web application. Affected versions include Horde Groupw...

CVE-2021-30951

CVE-2021-30951 is a WebKit-family use-after-free vulnerability that may be triggered by processing malicious web content. Affected components include WebKit (Safari/WebKit on Apple platforms) and WebKitGTK/WebKit2GTK variants. The root cause is described as a memory-management issue leading to po...

CVE-2021-31542

Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1 are affected by CVE-2021-31542. MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with crafted file names due to insufficient basename/path sanitation. The issue is addressed by stricter bas...

CVE-2021-37984

CVE-2021-37984: A heap buffer overflow in PDFium within Chromium/Chrome (before 95.0.4638.54). Affected: Google Chrome and Chromium-based browsers; vulnerability arises from PDFium aging, enabling potential remote heap corruption via crafted HTML. Remediation: update to Chrome/Chromium 95.0.4638....

CVE-2014-2270

CVE-2014-2270 affects the file/libmagic implementation (softmagic.c) prior to version 5.17. A crafted PE executable can trigger an out-of-bounds memory access in the softmagic data, enabling a context-dependent attacker to cause a denial-of-service (crash). Public advisories describe the impact a...

CVE-2016-4544

The CVE-2016-4544 issue is in the exif TIFF handling in PHP’s exif.c: the function exif_process_TIFF_in_JPEG does not validate TIFF start data, enabling a remote attacker to trigger an out-of-bounds read and potentially cause a denial of service or other impact. Affected PHP branches and versions...

CVE-2016-5403

CVE-2016-5403 affects QEMU’s virtio path (virtqueue_pop in hw/virtio/virtio.c). A local guest OS administrator can cause a denial of service via unbounded memory allocation by submitting virtqueue requests without waiting for completion, potentially crashing the QEMU process. Public postings acro...

CVE-2017-6831

The CVE-2017-6831 issue affects the Audio File Library (audiofile) 0.3.6 and older, involving a heap-based buffer overflow in IMA.cpp::decodeBlockWAVE that can crash the application via a crafted file (DoS). Advisories (e.g., Arch Linux ASA-201708-9, Debian DSA-3814-1) indicate the fix is upstrea...

CVE-2018-1000116

NET-SNMP is affected by CVE-2018-1000116 (reported as memory/heap corruption in the net-snmp PDU parsing path). The issue is described as a heap corruption vulnerability triggered when parsing the PDU prior to authentication, enabling a remote attacker to crash snmpd or potentially execute arbitr...

CVE-2018-14340

CVE-2018-14340 affects Wireshark dissectors that support zlib decompression across Wireshark versions 2.2.0–2.2.15, 2.4.0–2.4.7, and 2.6.0–2.6.1. Root cause: negative lengths in the zlib decompression path could cause a buffer over-read and crash. Mitigation identified in the connected documents ...

CVE-2018-14352

CVE-2018-14352 affects Mutt up to 1.10.0 and NeoMutt up to 2018-07-16. The imap_quote_string function in imap/util.c does not leave room for quote characters, causing a stack-based buffer overflow. Mageia and Fedora advisories indicate this could allow arbitrary code execution; patches exist: Mut...

CVE-2018-15822

CVE-2018-15822 affects FFmpeg/libav through 2.8 where flv_write_packet in libavformat/flvenc.c does not check for an empty audio packet, triggering an assertion failure. Multiple connected advisories (Debian DLA-1809, DSA-4449; USN-3967-1; Cloud Foundry/Ubuntu advisories) reference this CVE along...

CVE-2018-5125

CVE-2018-5125 is a memory-safety issue reported in Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

CVE-2019-11009

CVE-2019-11009: GraphicsMagick has a heap-based buffer over-read in ReadXWDImage (coders/xwd.c) that can cause denial of service or information disclosure when processing crafted XWD images. Affected product: GraphicsMagick 1.4 snapshot-20190322 Q8 (and related 1.3.31 references in older advisori...

CVE-2019-19330

CVE-2019-19330 affects the HAProxy HTTP/2 implementation. Affected component is the HTTP/2 header handling, which mishandles headers containing CR (0x0D), LF (0x0A), or NUL (0x00), enabling what is described as Intermediary Encapsulation Attacks. The vulnerability is exploitable via crafted HTTP/...

CVE-2020-15973

CVE-2020-15973: Insufficient policy enforcement in the extensions component of Google Chrome (Chromium) prior to 86.0.4240.75 allowed an attacker, by convincing a user to install a malicious extension, to bypass the same-origin policy. Public advisories (Debian, FreeBSD, Arch Linux) confirm the i...

CVE-2020-22021

CVE-2020-22021 is a buffer overflow vulnerability in FFmpeg 4.2, specifically in filter_edges (libavfilter/vf_yadif.c). A remote attacker could trigger a Denial of Service. Public documents consistently reference FFmpeg 4.2 as affected and show advisories/patches urging upgrade of FFmpeg componen...

CVE-2020-4046

CVE-2020-4046 affects WordPress: low-privilege users can abuse the embed block to inject unfiltered HTML in the block editor, enabling script execution when viewed by a higher-privilege user. Impact is described as editor/wp-admin script execution. The issue has been patched in WordPress 5.4.2 an...

CVE-2020-6096

The CVE-2020-6096 entry is supported by connected sources: the glitch is in ARMv7 memcpy() within GNU glibc (version 2.30.9000 in the description) where underflowing the third parameter num can cause a signed-compare bug, potentially writing out of bounds and enabling remote code execution. Debia...

CVE-2020-6427

CVE-2020-6427 is a use-after-free in Google Chrome’s audio subsystem that could allow a remote attacker to exploit heap corruption via a crafted HTML page. Affected: Google Chrome (audio path); vulnerability type: use-after-free. Impact: potential remote code execution is described in affected ad...

CVE-2020-6545

CVE-2020-6545 describes a use-after-free in Chrome’s audio pipeline that could allow remote code execution via a crafted HTML page, due to heap corruption in affected builds up to 84.0.4147.125. Debian and Debian-tracker entries confirm the issue and fix version (84.0.4147.125) was released; mult...

CVE-2021-26117

CVE-2021-26117 describes an LDAP authentication weakness in the optional ActiveMQ LDAP login module where anonymous access can bypass password verification. Connected sources confirm affected lines: Apache ActiveMQ Artemis prior to 2.16.0 and Apache ActiveMQ prior to 5.16.1 and 5.15.14. Debian/Ub...

CVE-2021-3713

CVE-2021-3713 is an out-of-bounds write in QEMU’s UAS (USB Attached SCSI) device emulation prior to 6.2.0-rc0, where the guest-supplied stream number is not checked, allowing out-of-bounds access to UASDevice->data3 and UASDevice->status3. This can crash QEMU or potentially enable code exec...

CVE-2021-38114

CVE-2021-38114 affects FFmpeg 4.4’s libavcodec/dnxhddec.c, where the init_vlc() function’s return value is not checked, potentially leading to an unspecified impact (Debian and CNVD references describe it as a broader FFmpeg vulnerability with possible denial of service/out-of-bounds effects). Af...

CVE-2022-2285

CVE-2022-2285 : Integer Overflow or Wraparound in vim/vim prior to 9.0. Affected: Vim (vim/vim) before 9.0. The connected advisories confirm the CVE is cataloged alongside other vim vulnerabilities, but the provided documents do not detail the exact root-cause beyond the overflow/wraparound label...

CVE-2022-24761

CVE-2022-24761 affects Waitress (Python WSGI server) up to version 2.1.0. The advisory describes two vulnerability classes that enable HTTP request smuggling when Waitress runs behind a proxy that does not fully validate RFC7230: (1) parsing integers with Python int(), allowing +10 to be treated ...

CVE-2022-26307

CVE-2022-26307 affects LibreOffice: the weakness arises from how the master key/IV is encoded for web-connection passwords, reducing entropy from 128 to 43 bits. Affected: The Document Foundation LibreOffice 7.2 before 7.2.7 and 7.3 before 7.3.3. Impact: stored web passwords in the user configura...

CVE-2022-27445

CVE-2022-27445 affects MariaDB Server v10.9 and below, caused by a segmentation fault in the sql_window.cc component. The issue is described in connected advisories as a denial-of-service risk due to kernel-like crash conditions triggered during query processing. Exploitation details are not prov...

CVE-2022-3646

CVE-2022-3646 is a Linux kernel vulnerability affecting the nilfs_attach_log_writer function in fs/nilfs2/segment.c (BPF component). The issue enables a memory leak and may be exploitable remotely. A patch is recommended to fix this issue (VDB-211961).

CVE-2022-3885

CVE-2022-3885 is a Use-after-free in V8 affecting Google Chrome prior to 107.0.5304.106 that could allow remote heap corruption via a crafted HTML page. The issue is confirmed in multiple trusted sources (Chromium/Chrome advisories and Astra Linux bulletin) and is tracked in Debian as fixed in Ch...

CVE-2022-39377

CVE-2022-39377 affects sysstat on 32-bit Linux, where allocate_structures in sa_common.c may overflow size calculations during arithmetic, enabling possible remote code execution. The issue stems from insufficient bounds checking before multiplication, tied to an incomplete fix; versions up to 12...

CVE-2023-2724

CVE-2023-2724 is a Chromium/Google Chrome type-confusion vulnerability in V8 prior to 113.0.5672.126. The issue allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with impact described as high (confidentiality, integrity, and availability). Remediation provid...

CVE-2024-26906

CVE-2024-26906 : In the Linux kernel, x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault(). A bpf program reading the vsyscall page with bpf_probe_read_kernel() can trigger copy_from_kernel_nofault(), which calls __get_user_asm() and may fault because the vsyscall page is not readab...

CVE-2024-27436

CVE-2024-27436 — Linux kernel ALSA: usb-audio issue Root cause: ALSA usb-audio parsing channels bits could overrun the map array if a device reports more bits than channels, allowing a write beyond bounds. Synopsis in connected sources: the vulnerability was resolved in the Linux kernel by stoppi...

CVE-2024-3044

CVE-2024-3044 concerns LibreOffice: Unchecked script execution in Graphic on-click binding allows a document to trigger built-in scripts when clicking a graphic, previously treated as trusted but now untrusted. The vulnerability affects multiple LibreOffice builds across distributions, with remed...

CVE-2024-35967

CVE-2024-35967: Linux Bluetooth SCO path vulnerable to not validating setsockopt input. syzbot reports copying data without input length check, causing slab-out-of-bounds reads via copy_from_sockptr_offset in include/linux/sockptr.h and an observed slab-out-of-bounds in sco_sock_setsockopt+0xc0b/...

CVE-2024-49991

The CVE-2024-49991 issue affects the Linux kernel DRM/AMD stack: amdkfd_free_gtt_mem cleared the wrong pointer, causing a use-after-free when amdgpu_bo_unref resets the pointer. The patch passes the correct pointer reference to amdgpu_bo_unref to ensure the original pointer is NULL’d correctly. T...

CVE-2010-3705

The vulnerability CVE-2010-3705 affects the Linux kernel SCTP code: sctp_auth_asoc_get_hmac in net/sctp/auth.c does not validate the hmac_ids array from a remote peer, enabling remote attackers to trigger memory corruption and a kernel panic. Affected versions are Linux kernel before 2.6.36; reme...

CVE-2010-4657

CVE-2010-4657 affects PHP5 prior to 5.4.4. The flaw allows passing invalid UTF-8 strings to xmlTextWriterWriteAttribute, which are misparsed by libxml2, causing a memory leak in the produced output. The vulnerability is triggered through the attribute-writing path and is not described as exploita...

CVE-2011-4362

CVE-2011-4362 affects lighttpd: a signedness error in the base64_decode routine used by HTTP authentication (http_auth.c) can trigger an out-of-bounds read with a negative index, allowing a remote attacker to cause a denial of service (segmentation fault). Impacted versions are lighttpd 1.4 befor...

CVE-2015-7704

CVE-2015-7704 describes a denial-of-service in ntpd caused by handling of Kiss-of-Death (KoD) messages. The issue arises from KoD processing that could delay or stop querying time sources. Affected software: ntpd in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77. Impact: unauthenticated remot...

CVE-2016-5423

CVE-2016-5423 affects PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4. The vulnerability arises from how CASE expressions in a test value subexpression or the inlining of an SQL function used for a CASE expression involving mixed type...

CVE-2017-3238

CVE-2017-3238 affects the MySQL Server component (Server: Optimizer). Affected MariaDB/MySQL versions include 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The vulnerability is exploitable over the network via multiple protocols, with a low-privileged attacker able to cause a ha...

CVE-2017-7611

CVE-2017-7611 affects Elfutils 0.168, where the check_symtab_shndx function in elflint.c is vulnerable to a heap-based buffer over-read via a crafted ELF file, leading to denial of service (application crash). The Connected documents also describe related ELF utils DoS variants (e.g., 2017-7612/7...

CVE-2018-10120

CVE-2018-10120 affects LibreOffice: SwCTBWrapper::Read in sw/source/filter/ww8/ww8toolbar.cxx does not validate a customizations index, enabling a heap-based buffer overflow when opening crafted Word records. Affected versions are LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1. Impact per desc...

CVE-2018-10194

Ghostscript vulnerability CVE-2018-10194 resides in the pdfwrite code path (gdevpdts.c) where a stack-based out-of-bounds write in pdf_set_text_matrix can be triggered by a crafted PDF. Affected product is Ghostscript; historical references show the issue affecting Ghostscript up to version 9.22,...

CVE-2018-12360

CVE-2018-12360 is a use-after-free vulnerability in Thunderbird (and Firefox components) triggered by deleting an input element during a mutation event handler invoked by focusing that element. Affected versions include Thunderbird before 60 and Thunderbird before 52.9.1; Firefox ESR before 60.1/...