CVE-2020-19131

CVE-2020-19131 describes a buffer overflow in LibTIFF v4.x, specifically in the invertImage() path of tiffcrop, leading to DoS. The connected docs confirm this vulnerability and tie it to multiple Linux advisories. Affected product is LibTIFF/libtiff; vulnerability stems from buffer overflow/unsa...

CVE-2020-25595

CVE-2020-25595 is a Xen PCI passthrough vulnerability disclosed across multiple advisories. The issue arises from PCI passthrough code that improperly uses register data; MSI handling paths operate on values read back from hardware registers that may be unsanitized. Impact is described as a poten...

CVE-2020-27758

CVE-2020-27758 : A flaw in ImageMagick (coders/txt.c) allows an attacker to submit a crafted file that ImageMagick processes, triggering undefined behavior outside the range of unsigned long long and likely impacting availability. Affected: ImageMagick versions prior to 7.0.8-68. This vulnerabili...

CVE-2020-6564

CVE-2020-6564: In Google Chrome, an inappropriate implementation in permissions allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page, before version 85.0.4183.83. This entry is supported by Debian/Fedora advisories and CVE listings stating that Chromium/C...

CVE-2021-25634

Summary: CVE-2021-25634 is a LibreOffice vulnerability described as an Improper Certificate Validation issue that allows an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp, which LibreOffice may incorrectly treat as valid. The issue affects The Do...

CVE-2021-26675

CVE-2021-26675 affects ConnMan’s DNS proxy (dnsproxy) prior to version 1.39. It is a stack-based buffer overflow that could allow a network-adjacent attacker to execute arbitrary code, as described across multiple sources (Arch Linux ASA, openSUSE update, Debian DSA/DLA, Gentoo GLSA). The issue i...

CVE-2021-41990

CVE-2021-41990 affects the gmp plugin in strongSwan up to version 5.9.4, where processing a crafted certificate with an RSASSA-PSS signature can trigger a remote integer overflow. The issue can be exploited by an initiator sending an unrelated self-signed CA certificate, but remote code execution...

CVE-2023-4355

CVE-2023-4355 affects Chromium-derived browsers (Google Chrome/Chromium) due to an out-of-bounds memory access in V8 that can lead to heap corruption via a crafted HTML page. The vulnerability is rated High severity (CVSS 3.1 base score 8.8) with network attack vector and user interaction require...

CVE-2023-51780

CVE-2023-51780: Linux kernel before 6.6.8 contains a use-after-free in do_vcc_ioctl (net/atm/ioctl.c) caused by a vcc_recvmsg race, enabling local exploitation. Affected: Linux kernel versions prior to 6.6.8. Root cause: race between vcc_recvmsg and do_vcc_ioctl leading to use-after-free. Impact:...

CVE-2026-4775

The CVE-2026-4775 entry concerns the libtiff library. A signed integer overflow in putcontig8bitYCbCr44tile can be triggered by a specially crafted TIFF file, leading to an out-of-bounds heap write. Documented impact includes denial of service (crash) or arbitrary code execution. Affected details...

CVE-2011-4516

CVE-2011-4516 affects JasPer, specifically the heap-based buffer overflow in the function jpc_cox_getcompparms (libjasper/jpc/jpc_cs.c) within JasPer 1.900.1. A crafted value in a COD (coding style default) marker segment of a JPEG2000 file can cause remote code execution or memory corruption, po...

CVE-2014-9750

CVE-2014-9750 concerns ntpd with Autokey authentication. The root cause is an error in ntp_crypto.c where a packet extension field’s length value is not properly validated, allowing a remote attacker to either leak sensitive information from ntpd’s process memory or crash the daemon via a malform...

CVE-2016-0647

CVE-2016-0647 corresponds to an unspecified vulnerability in MySQL/MariaDB affecting Full-Text Search (FTS) that allows local users to impact availability. Affected: Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier; MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x b...

CVE-2016-9893

CVE-2016-9893 relates to memory safety bugs reported in Thunderbird 45.5, with evidence of memory corruption. Affected products include Firefox <50.1, Firefox ESR <45.6, and Thunderbird

CVE-2017-17806

CVE-2017-17806 affects the Linux kernel before 4.14.8. The HMAC implementation (crypto/hmac.c) does not validate that the underlying hash algorithm is unkeyed, allowing a local attacker who can use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and SHA-3 (CONFIG_CRYPTO_SHA3) to tri...

CVE-2017-5444

CVE-2017-5444 is a buffer overflow in parsing application/http-index-format data that enables an out-of-bounds read. Affected: Mozilla Thunderbird < 52.1, Firefox ESR < 45.9/52.1, and Firefox

CVE-2017-6888

CVE-2017-6888 concerns the FLAC library: in FLAC version 1.3.2, the function read_metadata_vorbiscomment_() may leak memory when processing a specially crafted FLAC file. This memory leak could contribute to resource exhaustion and a denial of service. The vulnerability is documented across multi...

CVE-2018-1000005

CVE-2018-1000005 affects libcurl 7.49.0 through 7.57.0, due to an out-of-bounds read when handling HTTP/2 trailers. Reading a trailer could corrupt future trailers, leading to a crash or potential information disclosure; the issue arises from mis-updated math after changing the header creation to...

CVE-2018-14359

CVE-2018-14359 affects Mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16. A buffer overflow caused by processing base64 data is the underlying issue. Multiple advisories (Debian, Mageia, Gentoo, Fedora, CNVD, etc.) describe potential for arbitrary code execution or related impacts when process...

CVE-2018-20549

CVE-2018-20549 concerns libcaca's caca_file_read, describing an Illegal WRITE memory access in libcaca 0.99.beta19. The connected docs confirm this exact CVE is part of multiple libcaca vulnerabilities and show that fixes were released across several distributions (e.g., SUSE SU-2019:2745-1/2, op...

CVE-2018-5095

CVE-2018-5095 is an integer overflow in the Skia library during edge-builder memory allocation on systems with 8 GB+ RAM, causing uninitialized memory usage and a potentially exploitable crash. Public disclosures show affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Fir...

CVE-2018-5156

The CVE-2018-5156 entry describes a vulnerability in media capture: when the media source type is changed during capture, stream data can be cast to the wrong type, causing a crash. Affected products include Thunderbird

CVE-2018-5159

CVE-2018-5159 describes an integer overflow in the Skia library caused by 32-bit integer use in an array without bounds checks, leading to out-of-bounds writes. This can crash web content and is potentially exploitable. Affected products include Thunderbird < 52.8, Thunderbird ESR < 52.8, F...

CVE-2018-7492

The CVE-2018-7492 entry affects the Linux kernel prior to 4.14.7, where a NULL pointer dereference in net/rds/rdma.c __rds_rdma_map() can be triggered by local attackers via RDS_GET_MR / RDS_GET_MR_FOR_DEST. This leads to a system panic and denial-of-service. Affected versions are exposed to loca...

CVE-2019-19813

CVE-2019-19813 is a Linux kernel use-after-free in __mutex_lock on Linux kernel 5.0.21 when mounting a crafted btrfs image, performing operations, and calling syncfs, related to mutex_can_spin_on_owner, __btrfs_qgroup_free_meta, and btrfs_insert_delayed_items. It is a local, user-interaction-requ...

CVE-2019-6486

CVE-2019-6486 affects Go runtimes prior to 1.10.8 and 1.11.x prior to 1.11.5, due to mishandling of P-521 and P-384 elliptic curves. This can cause CPU-based denial of service and may allow ECDH private key recovery. Public details across connected docs confirm the vulnerability and its Go-versio...

CVE-2020-15960

CVE-2020-15960 refers to an information-disclosure vulnerability in Chromium/Google Chrome prior to 85.0.4183.121. The 15960 issue is an out-of-bounds read in the storage component, exploitable via a crafted HTML page. The Debian/Arch/Gentoo entries corroborate the fix was to upgrade to 85.0.4183...

CVE-2020-15970

CVE-2020-15970 is a Use-after-free in the NFC component of the Chromium/Google Chrome browser before 86.0.4240.75. Public sources in Debian/Arch/Fedora/FreeBSD describe it as a remote issue where an attacker who can cause renderer compromise could potentially escape the sandbox via a crafted HTML...

CVE-2020-22019

CVE-2020-22019 : FFmpeg 4.2 contains a buffer overflow in the convolution_y_10bit path (libavfilter/vf_vmafmotion.c) that could allow a remote attacker to cause a Denial of Service. Connected documents confirm this exact trigger in FFmpeg 4.2 and note multiple advisories that fix or mitigate the ...

CVE-2020-6494

CVE-2020-6494 : Google Chrome on Android prior to 83.0.4103.97 is affected by an incorrect security UI in the payments component that allows a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Connected sources (Arch Linux ASA-202006-3, Debian DSA-4714, FreeBSD vuln note, CN...

CVE-2020-6541

The CVE-2020-6541 entry concerns a Use-after-free in WebUSB in Google Chrome prior to version 84.0.4147.105 . The underlying issue could allow a remote attacker to potentially exploit a heap corruption via a crafted HTML page. Affected software is Chrome’s WebUSB component; exploitability is desc...

CVE-2020-7045

Wireshark 3.0.x before 3.0.8 contains a vulnerability in the BT ATT dissector that could cause a crash. The root cause is related to opcode validation in the BT ATT dissector code path (epan/dissectors/packet-btatt.c). Affected product: Wireshark 3.0.x; vulnerable version range includes before 3....

CVE-2021-20245

ImageMagick vulnerability CVE-2021-20245 affects the webp coder (coders/webp.c). A crafted input file processed by ImageMagick may trigger undefined behavior via division by zero, with availability impact. Public details consistently reference this flaw and its presence across multiple advisories...

CVE-2021-37962

CVE-2021-37962 is a use-after-free in Chrome’s Performance Manager before version 94.0.4606.54, enabling a remote attacker who has compromised the renderer to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome (renderer/Performance Manager compone...

CVE-2021-43860

CVE-2021-43860 (Flatpak) affects Flatpak prior to 1.12.3 and 1.10.6, where permissions shown to users at install time may not match runtime permissions due to a null byte in app metadata. Malicious apps can grant themselves hidden permissions because xa.metadata is read from commit metadata as a ...

CVE-2022-2598

CVE-2022-2598 affects Vim where an out-of-bounds write to the API in vim/vim occurs in versions before 9.0.0100. Public advisories in the connected docs (e.g., Alpine and CBL-Mariner) indicate an upgrade to a newer Vim version to resolve this issue (CLI-safe wording: upgrade to 9.0.0100 or later)...

CVE-2022-2953

CVE-2022-2953 affects LibTIFF 4.4.0 with an out-of-bounds read in extractImageSection (tools/tiffcrop.c:6905), enabling DoS via crafted TIFF files. A fix is available via commit 48d6ece8389b01129e7d357f0985c8f938ce3da3. Connected advisories show mitigations for various platforms (e.g., Amazon Lin...

CVE-2022-30550

CVE-2022-30550 affects Dovecot 2.2 and 2.3 before 2.3.20. When two passdb entries share the same driver and args, incorrect username_filter and mechanism settings can be applied to passdb definitions, leading to an unintended security configuration and potential privilege escalation in certain se...

CVE-2023-4781

CVE-2023-4781 affects Vim (vim/vim) prior to 9.0.1873. The issue is described as a heap-based buffer/overflow in code related to Vim’s substitution handling (vim_regsub_both) with multiple related CVEs cited in downstream advisories. Impact, as reported by the connected documents, includes potent...

CVE-2023-52623

Technical details about CVE-2023-52623 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2024-0808

The CVE-2024-0808 entry is supported by multiple connected documents: it describes an Integer underflow in Chromium’s WebUI that affects Google Chrome prior to 121.0.6167.85, enabling a remote attacker to potentially trigger heap corruption via a malicious file (High/CRITICAL via CVSS). Affected ...

CVE-2024-26773

CVE-2024-26773: The Linux kernel ext4 block allocator vulnerability is resolved. The fix prevents allocating blocks from a group whose block bitmap is corrupted during concurrent operations by verifying the group bitmap integrity before using ac_b_ex in ext4_mb_try_best_found(), and by guarding t...

CVE-2024-47745

The CVE-2024-47745 entry describes a Linux kernel vulnerability where remap_file_pages bypassed W^X enforcement when using personality(READ_IMPLIES_EXEC) followed by a RW remap, due to the remap_file_pages path calling do_mmap() before the LSM security check. A fix adds a security_mmap_file LSM h...

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 is vulnerable to remote code execution. An attacker can execute arbitrary JavaScript code with chrome privileges by utilizing an IDL fragment to trigger a wi...

CVE-2015-0411

CVE-2015-0411 concerns an unspecified remote vulnerability in Oracle MySQL Server versions 5.5.40 and earlier and 5.6.21 and earlier, related to Server: Security: Encryption. The impact is partial confidentiality, integrity, and availability loss via remote access. Connected advisories indicate r...

CVE-2015-8540

CVE-2015-8540: libpng contains an integer underflow in png_check_keyword (pngwutil.c) that allows remote attackers to trigger an out-of-bounds read via a space character used as a PNG keyword. Affected families include libpng 0.90–0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x an...

CVE-2016-0706

CVE-2016-0706 affects Apache Tomcat. Root cause: StatusManagerServlet not on RestrictedServlets.properties, enabling remote authenticated users to bypass SecurityManager and read arbitrary HTTP requests, potentially exposing session IDs. Affected versions include Tomcat 6.x before 6.0.45, 7.x bef...

CVE-2018-1000168

CVE-2018-1000168 affects nghttp2 versions 1.10.0 through 1.31.0, where an improper input validation in ALTSVC frame handling can cause a segmentation fault and denial of service. The vulnerability is exploitable via network clients. Public advisories confirm the issue is fixed in nghttp2 >= 1....

CVE-2018-10846

CVE-2018-10846 describes a cache-based side-channel in GnuTLS that can enable plaintext recovery in cross-VM settings. An attacker could combine a Just in Time Prime+probe attack with a Lucky-13 attack by sending crafted packets to exploit this vulnerability. Remediation in publicly documented ad...

CVE-2018-12393

CVE-2018-12393 concerns 32‑bit Firefox builds (not 64‑bit) where an integer overflow during scripts-to-UTF-16 conversion can allocate a too-small buffer, causing an out-of-bounds write. Affected products include Firefox < 63, Firefox ESR < 60.3, and Thunderbird