CVE-2022-3885

CVE-2022-3885 is a Use-after-free in V8 affecting Google Chrome prior to 107.0.5304.106 that could allow remote heap corruption via a crafted HTML page. The issue is confirmed in multiple trusted sources (Chromium/Chrome advisories and Astra Linux bulletin) and is tracked in Debian as fixed in Ch...

CVE-2022-39377

CVE-2022-39377 affects sysstat on 32-bit Linux, where allocate_structures in sa_common.c may overflow size calculations during arithmetic, enabling possible remote code execution. The issue stems from insufficient bounds checking before multiplication, tied to an incomplete fix; versions up to 12...

CVE-2023-4236

CVE-2023-4236 affects BIND 9 to include versions 9.18.0–9.18.18 and 9.18.11-S1–9.18.18-S1. The issue is a flaw in the DNS-over-TLS networking code that can cause an assertion failure, leading to an unexpected termination of named under heavy DNS-over-TLS query load. The practical consequence is a...

CVE-2023-52752

CVE-2023-52752 (Linux kernel) is backed by concrete fix details in connected docs: a use-after-free in the SMB/CIFS client code path (cifs_debug_data_proc_show) when reading /proc/fs/cifs/DebugData during mount/umount. The fix adds a check to skip SMB sessions that are tearing down (ses_status ==...

CVE-2024-26663

CVE-2024-26663 — Linux kernel (TIPC) bearer handling : The issue occurs in tipc_nl_bearer_add() when the UDP options attribute is used; it can call tipc_udp_nl_bearer_add() for non-UDP bearers, causing tipc_udp_is_known_peer() to dereference a non-UDP bearer and trigger a general protection fault...

CVE-2024-35967

CVE-2024-35967: Linux Bluetooth SCO path vulnerable to not validating setsockopt input. syzbot reports copying data without input length check, causing slab-out-of-bounds reads via copy_from_sockptr_offset in include/linux/sockptr.h and an observed slab-out-of-bounds in sco_sock_setsockopt+0xc0b/...

CVE-2024-49950

CVE-2024-49950 affects the Linux kernel Bluetooth L2CAP implementation (l2cap_connect), with a slab-use-after-free/KASAN issue reported in l2cap_connect.constprop.0. Connected advisories (Unity Linux UTSA-2026-005148, Azure Linux CVE advisory, MiracleLinux AXSA:2025-10392) confirm the fix has bee...

CVE-2025-38000

CVE-2025-38000 affects the Linux kernel HFSC scheduler qlen accounting: when enqueuing the first packet, hfsc_enqueue() previously used child qdisc peek() before updating sch->q.qlen and sch->qstats.backlog, which could trigger a dequeue and leave the HFSC class in an inconsistent state (po...

CVE-2017-10078

CVE-2017-10078 affects Oracle Java SE 8u131 (Scripting) and can be exploited over network with multiple protocols, enabling high-impact confidentiality and integrity violations and data access. The vulnerability can be triggered by sandboxed Web Start/Applet use or via APIs without sandboxing. Th...

CVE-2017-12153

CVE-2017-12153 refers to a security flaw in the Linux kernel where nl80211_set_rekey_data() in net/wireless/nl80211.c does not validate required Netlink attributes, enabling a local attacker with CAP_NET_ADMIN to trigger a NULL pointer dereference and system crash. The vulnerability is described ...

CVE-2017-17864

CVE-2017-17864 affects the Linux kernel up to version 4.14.8, specifically the BPF verifier code (kernel/bpf/verifier.c). The root cause is a mishandling of states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which can allow a local user to leak potentially sen...

CVE-2018-10194

Ghostscript vulnerability CVE-2018-10194 resides in the pdfwrite code path (gdevpdts.c) where a stack-based out-of-bounds write in pdf_set_text_matrix can be triggered by a crafted PDF. Affected product is Ghostscript; historical references show the issue affecting Ghostscript up to version 9.22,...

CVE-2018-12360

CVE-2018-12360 is a use-after-free vulnerability in Thunderbird (and Firefox components) triggered by deleting an input element during a mutation event handler invoked by focusing that element. Affected versions include Thunderbird before 60 and Thunderbird before 52.9.1; Firefox ESR before 60.1/...

CVE-2018-14352

CVE-2018-14352 affects Mutt up to 1.10.0 and NeoMutt up to 2018-07-16. The imap_quote_string function in imap/util.c does not leave room for quote characters, causing a stack-based buffer overflow. Mageia and Fedora advisories indicate this could allow arbitrary code execution; patches exist: Mut...

CVE-2019-11008

CVE-2019-11008 affects GraphicsMagick 1.4 snapshot-20190322 Q8, with a heap-based buffer overflow in theWriteXWDImage function (coders/xwd.c). Exploitation via a crafted XWD image can cause the application to crash (denial of service) and possibly other impacts. Public advisories across multiple ...

CVE-2019-11009

CVE-2019-11009: GraphicsMagick has a heap-based buffer over-read in ReadXWDImage (coders/xwd.c) that can cause denial of service or information disclosure when processing crafted XWD images. Affected product: GraphicsMagick 1.4 snapshot-20190322 Q8 (and related 1.3.31 references in older advisori...

CVE-2020-11041

CVE-2020-11041 affects FreeRDP up to and including 2.0.0, where an outside controlled array index is used unchecked for sound backend configuration (alsa, oss, pulse, etc.). This can cause a client crash and may lead to a session disconnect or distorted sound. A fix is available in 2.1.0; if upgr...

CVE-2020-13920

CVE-2020-13920 affects Apache ActiveMQ through a JMX RMI registry authentication flaw. An unauthenticated client can bind a proxy to the jmxrmi entry, enabling MITM-style interception of credentials when users connect. Affected guidance: upgrade to a fixed ActiveMQ release (initial advisory cites...

CVE-2020-15973

CVE-2020-15973: Insufficient policy enforcement in the extensions component of Google Chrome (Chromium) prior to 86.0.4240.75 allowed an attacker, by convincing a user to install a malicious extension, to bypass the same-origin policy. Public advisories (Debian, FreeBSD, Arch Linux) confirm the i...

CVE-2020-15974

CVE-2020-15974 is an integer overflow in Blink affecting Chromium/Google Chrome prior to 86.0.4240.75, potentially enabling arbitrary code execution or site‑isolation bypass as described in the linked Debian advisory. Debian notes a broader patch set and fixes in 87.0.4280.88-0.4~deb10u1 for Chro...

CVE-2020-6096

The CVE-2020-6096 entry is supported by connected sources: the glitch is in ARMv7 memcpy() within GNU glibc (version 2.30.9000 in the description) where underflowing the third parameter num can cause a signed-compare bug, potentially writing out of bounds and enabling remote code execution. Debia...

CVE-2020-6559

CVE-2020-6559 is a Use-After-Free in Chrome/Chromium’s Presentation API (heap corruption) that could be exploited remotely via a crafted HTML page. Affected products are Google Chrome/Chromium prior to version 85.0.4183.83. Mitigation from the connected documents shows upgrading to 85.0.4183.83 o...

CVE-2020-9431

Wireshark LTE RRC dissector memory leak CVE-2020-9431 affects Wireshark versions 3.2.0–3.2.1, 3.0.0–3.0.8, and 2.6.0–2.6.14. Root cause: memory leak from certain append operations in epan/dissectors/packet-lte-rrc.c. Remediation: code fix adjusted the append operations to prevent leaks. Connected...

CVE-2021-37984

CVE-2021-37984: A heap buffer overflow in PDFium within Chromium/Chrome (before 95.0.4638.54). Affected: Google Chrome and Chromium-based browsers; vulnerability arises from PDFium aging, enabling potential remote heap corruption via crafted HTML. Remediation: update to Chrome/Chromium 95.0.4638....

CVE-2021-39263

CVE-2021-39263 is a vulnerability in NTFS-3G where a crafted NTFS image can trigger a heap-based buffer overflow due to an unsanitized attribute in ntfs_get_attribute_value. The issue is in NTFS-3G versions older than 2021.8.22. Reported impact includes potential heap buffer overflow when process...

CVE-2022-0554

CVE-2022-0554 is referenced in connected Astra Linux security bulletin as a Vim vulnerability: “Out-of-range Pointer Offset” in the GitHub Vim/vim repository, affecting Vim prior to 8.2. The Astra bulletin repeats the description but provides no additional technical details (affected versions, ex...

CVE-2022-3646

CVE-2022-3646 is a Linux kernel vulnerability affecting the nilfs_attach_log_writer function in fs/nilfs2/segment.c (BPF component). The issue enables a memory leak and may be exploitable remotely. A patch is recommended to fix this issue (VDB-211961).

CVE-2023-4569

CVE-2023-4569 – Linux kernel nf_tables memory leak : A memory leak is triggered by nft_set_catchall_flush in net/netfilter/nf_tables_api.c. Several connected advisories describe this as a local issue that can leak memory when catchall elements are deactivated. Affected software is the Linux kerne...

CVE-2024-26857

CVE-2024-26857 affects the Linux kernel’s geneve_rx path in drivers/net/geneve.c, where skb->network_header must be saved before calling pskb_inet_may_pull() to recompute the network header after pulling headers. The issue is tied to uninitialized values in IP_ECN_decapsulate and the chain lea...

CVE-2024-27436

CVE-2024-27436 — Linux kernel ALSA: usb-audio issue Root cause: ALSA usb-audio parsing channels bits could overrun the map array if a device reports more bits than channels, allowing a write beyond bounds. Synopsis in connected sources: the vulnerability was resolved in the Linux kernel by stoppi...

CVE-2024-49991

The CVE-2024-49991 issue affects the Linux kernel DRM/AMD stack: amdkfd_free_gtt_mem cleared the wrong pointer, causing a use-after-free when amdgpu_bo_unref resets the pointer. The patch passes the correct pointer reference to amdgpu_bo_unref to ensure the original pointer is NULL’d correctly. T...

CVE-2015-2925

The vulnerability CVE-2015-2925 affects the Linux kernel prior to 4.2.4, specifically the prepend_path function in fs/dcache.c. It allows a local attacker to bypass container protections by renaming a directory inside a bind mount, enabling a double-chroot-style escape. The impact is enabling pri...

CVE-2015-4819

CVE-2015-4819: An unspecified vulnerability in Oracle MySQL Server affecting 5.5.44 and earlier and 5.6.25 and earlier, located in the Client programs component. It has complete impact on confidentiality, integrity, and availability. The IBM Guardium bulletin (CVE reference list) documents this C...

CVE-2015-5211

CVE-2015-5211 affects Pivotal/Spring Framework where a crafted URL with a batch script extension can trigger a reflected file download, potentially downloading a malicious response. The linked IBM bulletin details exploit scenarios (RFD/open redirect risks) and provides a remediation path urging ...

CVE-2015-5252

The CVE-2015-5252 issue affects Samba’s smbd (vfs.c) where symlinks can bypass share path restrictions when share names contain certain substrings. A remote, authenticated attacker could access resources outside the intended share by pointing a symlink outside the share. Affected series include S...

CVE-2017-16612

CVE-2017-16612 affects libXcursor prior to 1.1.15, with integer overflows that can cause heap buffer overflows when processing malicious cursor files. The issue also potentially involves the related code in cursor/xcursor.c in Wayland up to 1.14.0. The available connected documents specify the vu...

CVE-2017-5029

CVE-2017-5029 affects libxslt 1.1.29 and is used by Blink/Chrome. The issue is an integer overflow in xsltAddTextString during a size calculation, enabling a remote attacker to cause an out-of-bounds memory write via a crafted HTML page. Connected records corroborate the libxslt involvement and i...

CVE-2017-6832

CVE-2017-6832 affects Audio File Library (audiofile) up to version 0.3.6, with a heap-based buffer overflow in MSADPCM.cpp:decodeBlock that can cause a remote crash via a crafted file (denial of service). Public advisories confirm multiple vendors released fixes (e.g., Debian DSA/SEC, ALAS/Cloud ...

CVE-2018-12599

CVE-2018-12599 (ImageMagick) : In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow an attacker to cause an out-of-bounds write via a crafted BMP file. The risk described in public advisories is the memory/write corruption potential, with no in-document details on expl...

CVE-2018-19965

Technical details about CVE-2018-19965 (Xen) are not provided in the connected documents. The initial description lacks vendor/product/version/root-cause/fix specifics. Monitor for updates from Xen advisories.

CVE-2019-25033

CVE-2019-25033 : Unbound before 1.9.5 has an integer overflow in the regional allocator via the ALIGN_UP macro. The vendor disputes this as a vulnerability; a running Unbound installation cannot be remotely or locally exploited. Public docs reference this CVE across multiple advisories linked to ...

CVE-2020-15964

CVE-2020-15964 is a Chrome/Chromium vulnerability affecting the media component (V8) with a pre-85.0.4183.121 build. The issue is described as an out-of-bounds write in V8 that could enable remote arbitrary code execution, tied to heap corruption in crafted HTML pages. Multiple connected advisori...

CVE-2020-15971

CVE-2020-15971 is a use-after-free in the printing component of Chromium/Google Chrome before 86.0.4240.75. A remote attacker who has compromised the renderer could potentially escape the sandbox via a crafted HTML page, as described in multiple sources (Debian/Arch/FreeBSD summaries). Public dis...

CVE-2020-21041

CVE-2020-21041 is a FFmpeg 4.1 buffer overflow in libavcodec/pngenc.c (apng_do_inverse_blend) that enables a remote attacker to cause a Denial of Service. The connected documents confirm this exact issue across multiple sources (Astra Linux bulletin, Debian advisories) and reference mitigations v...

CVE-2020-6383

CVE-2020-6383 is a type confusion in Google Chrome's V8 engine that could allow a remote attacker to cause heap corruption via a crafted HTML page. The initial entry notes Chrome versions prior to 80.0.3987.116 were affected. The connected Chrome update (Stable Channel Update for Desktop) confirm...

CVE-2020-6432

CVE-2020-6432 : Affected software is Chromium/Google Chrome prior to 81.0.4044.92. Description: an insufficient policy enforcement in navigations vulnerability could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. Impact per documents: potential bypass of naviga...

CVE-2020-6543

CVE-2020-6543 affects Google Chrome/Chromium and is a use-after-free in the task scheduling path that could allow a remote attacker to abuse heap corruption via a crafted HTML page. The vulnerability is described as potentially enabling remote code execution with network attack surface and requir...

CVE-2020-6548

CVE-2020-6548: Heap buffer overflow in Skia within Google Chrome prior to 84.0.4147.125. A remote attacker who gains control of the renderer process could exploit heap corruption via a crafted HTML page. Affected product: Chrome/Chromium with Skia integration. Impact: potential arbitrary code exe...

CVE-2020-6549

CVE-2020-6549 : Use-after-free in Chrome’s media subsystem (pre-84.0.4147.125) can allow a remote attacker to exploit heap corruption via a crafted HTML page. Affected: Google Chrome (media component). Root cause: use-after-free. Impact per sources: arbitrary code execution, information disclosur...

CVE-2020-6569

CVE-2020-6569 is an integer overflow in WebUSB in Google Chrome/Chromium prior to 85.0.4183.83. The vulnerability could allow a remote attacker who has compromised the renderer process to potentially cause heap corruption via a crafted HTML page. Public advisories in the connected set (e.g., Debi...