CVE-2017-17787

CVE-2017-17787 affects GIMP 2.8.22, describing a heap-based buffer over-read in read_creator_block within plug-ins/common/file-psp.c. The available connected documents show multiple distributions documenting this issue and note that a security update exists (e.g., openSUSE security update openSUS...

CVE-2018-15908

Artifex Ghostscript 9.23, prior to 2018-08-23, is affected by a restriction-bypass in .tempfile that allows crafted PostScript files to bypass safety checks and write files. Impact is stated as enabling file writes via PostScript, with broader security fixes applied in multiple distros. Remediati...

CVE-2018-19539

CVE-2018-19539 (JasPer 2.0.14) : An access violation in libjasper/base/jas_image.c:jas_image_readcmpt can cause a denial of service. Affected component is jas_image_readcmpt in JasPer 2.0.14; root cause is an access violation leading to crash/DoS. Public remediation/fix details are not provided i...

CVE-2018-20650

CVE-2018-20650 is described in connected documentation as a vulnerability in Poppler 0.72.0 where a reachable Object::dictLookup assertion in FileSpec.cc (pdfdetach) can be exploited to cause a denial of service due to lack of a type check for dict data. The MiracleLinux AXSA advisory lists this ...

CVE-2019-5760

CVE-2019-5760 affects Google Chrome’s WebRTC implementation. Insufficient pointer validation could lead to heap corruption via a crafted HTML page, enabling remote exploitation. The fix is available in Chrome updates from 72.0.3626.81 onward.

CVE-2020-14929

CVE-2020-14929 affects Alpine (pre-2.23) where,a PREAUTH scenario can cause Alpine to proceed over an insecure connection after a /tls is sent instead of closing the connection. Public records in multiple vendor advisories indicate the issue is addressed by upgrading Alpine to 2.23 or newer; Fedo...

CVE-2020-17368

CVE-2020-17368 affects Firejail prior to 0.9.64. It arises when using --output or --output-stderr, where shell metacharacters are mishandled and the command line arguments are concatenated into a single string passed to a shell, enabling potential command injection. Public disclosures in Debian L...

CVE-2020-26237

Highlight.js vulnerability CVE-2020-26237: Prototype Pollution in versions before 9.18.2 and 10.1.2 (and older); a malicious HTML block could pollute Object.prototype during highlighting. Upstream fixes exist in 9.18.2+, 10.1.2+, and newer. Debian/OSS advisories also reference updates; remediatio...

CVE-2020-35459

CVE-2020-35459 affects ClusterLabs crmsh up to version 4.2.1. A local attacker can trigger shell code injection via the crm history command, potentially escalating privileges. Root cause: improper handling of commands in crm history that enables code execution. Impact: local privilege escalation....

CVE-2020-6532

CVE-2020-6532 affects Google Chrome (SCTP use-after-free) prior to version 84.0.4147.105. The root cause is a use-after-free in SCTP handling, which could allow remote code execution via a crafted HTML page (heap corruption). Public advisories in connected docs confirm the issue and list affected...

CVE-2020-6535

CVE-2020-6535 affects Google Chrome/WebUI where insufficient data validation in the WebUI allowed a renderer-compromised attacker to inject scripts/HTML into a privileged page via a crafted HTML page. The vulnerability targets Chrome versions prior to 84.0.4147.89. Public sources in connected doc...

CVE-2020-6541

The CVE-2020-6541 entry concerns a Use-after-free in WebUSB in Google Chrome prior to version 84.0.4147.105 . The underlying issue could allow a remote attacker to potentially exploit a heap corruption via a crafted HTML page. Affected software is Chrome’s WebUSB component; exploitability is desc...

CVE-2020-6569

CVE-2020-6569 is an integer overflow in WebUSB in Google Chrome/Chromium prior to 85.0.4183.83. The vulnerability could allow a remote attacker who has compromised the renderer process to potentially cause heap corruption via a crafted HTML page. Public advisories in the connected set (e.g., Debi...

CVE-2021-37978

CVE-2021-37978 is a heap-buffer-overflow in Blink (Chromium/Chrome) before version 94.0.4606.81 that could allow remote code execution via crafted HTML. Multiple connected sources (Chrome security update notes and Arch/Debian security advisories) confirm the issue and reference 94.0.4606.81 as th...

CVE-2021-37980

CVE-2021-37980 affects Chromium’s Sandbox component. An inappropriate implementation allowed sandbox escapes in versions before 94.0.4606.81, enabling a remote attacker to potentially bypass site isolation. The Debian/Arch/Fedora advisories indicate the fix is in Chromium 94.0.4606.81 or later; u...

CVE-2021-37984

CVE-2021-37984: A heap buffer overflow in PDFium within Chromium/Chrome (before 95.0.4638.54). Affected: Google Chrome and Chromium-based browsers; vulnerability arises from PDFium aging, enabling potential remote heap corruption via crafted HTML. Remediation: update to Chrome/Chromium 95.0.4638....

CVE-2022-29221

CVE-2022-29221 affects the Smarty PHP template engine. Before versions 3.1.45 and 4.1.1, template authors could inject PHP code by using a malicious {block} name or {include} file name. This could allow code execution in untrusted templates. Affected users should upgrade to Smarty 3.1.45 or 4.1.1...

CVE-2022-45188

CVE-2022-45188 affects Netatalk up to version 3.1.13, where a heap-based buffer overflow in afp_getappl allows code execution via a crafted .appl file, enabling remote root access on some platforms (e.g., FreeBSD used by TrueNAS). Public advisories (Gentoo GLSA, Debian/Ubuntu/DLA notices, Fedora)...

CVE-2023-23583

CVE-2023-23583 is an Intel microcode issue where mishandling of certain sequences of processor instructions on Intel Ice Lake and newer CPUs may allow a local attacker to escalate privileges, disclose information, or cause denial of service. Publicly documented impact and mitigations come from mu...

CVE-2023-2722

CVE-2023-2722 describes a use-after-free in Google Chrome’s Autofill UI on Android, prior to 113.0.5672.126, enabling heap corruption via a crafted HTML page. The vulnerability is tied to the Chromium Autofill UI implementation and has been classified as High severity. Public sources indicate the...

CVE-2023-2723

CVE-2023-2723 relates to a use-after-free in Chrome/Chromium DevTools prior to 113.0.5672.126. A remote attacker who already compromised the renderer could trigger heap corruption via a crafted HTML page. The vulnerability has a high security impact (C/H/I/A) and a network attack vector with user...

CVE-2023-34059

CVE-2023-34059 is a local, high-severity vulnerability in open-vm-tools’ vmware-user-suid-wrapper that can hijack the /dev/uinput file descriptor to simulate user inputs. It affects multiple Linux distributions (e.g., Debian, Red Hat/CentOS, AlmaLinux/AlmaLinux, Amazon Linux 2/2023), with advisor...

CVE-2023-6508

CVE-2023-6508 describes a use-after-free in Media Stream of Chromium-based browsers (Google Chrome) that could allow remote heap corruption via a crafted HTML page. Public details in the connected sources confirm affected products are Google Chrome/Chromium, with the issue triggered by Media Stre...

CVE-2024-42302

CVE-2024-42302 : The Linux kernel fixed a use-after-free in PCI/DPC when a DPC event occurs concurrently with hot-removal on the same PCIe hierarchy. The underlying issue was that pci_bridge_wait_for_secondary_bus() did not hold a reference to the child pci_dev during a DPC event, allowing concur...

CVE-2016-0647

CVE-2016-0647 corresponds to an unspecified vulnerability in MySQL/MariaDB affecting Full-Text Search (FTS) that allows local users to impact availability. Affected: Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier; MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x b...

CVE-2016-2533

CVE-2016-2533 affects Pillow and PIL prior to versions that fix the ImagingPcdDecode function in PcdDecode.c. A crafted PhotoCD file can cause a remote denial of service (crash) due to a buffer overflow in Pillow before 3.1.1 and PIL 1.1.7 and earlier. In all connected sources, the vulnerability ...

CVE-2016-4483

CVE-2016-4483 is a libxml2 serialization bug: xmlBufAttrSerializeTxtContent can trigger an out-of-bounds read when a non-UTF-8 attribute value is serialized, leading to a denial of service. Connected records note related follow-ons: CVE-2016-9598 (and CVE-2016-9596) describe DoS/out-of-bounds sce...

CVE-2016-5118

CVE-2016-5118 affects GraphicsMagick and ImageMagick: the OpenBlob handling accepts a leading ‘|’ pipe in a filename, enabling remote code execution. Connected advisories confirm the issue and note remediation by upgrading to at least GraphicsMagick 1.3.24 (and corresponding ImageMagick fixes) an...

CVE-2017-10111

CVE-2017-10111 affects Oracle Java OpenJDK’s Libraries component (Java SE). The connected advisories confirm vulnerable versions include Java SE 8u131 and Java SE Embedded 8u131, with exploitation described as arbitrary code execution via the LambdaFormEditor bounds checks in the Libraries, enabl...

CVE-2017-17784

CVE-2017-17784 affects GIMP 2.8.22 with a heap-based buffer over-read in the gbr import parser (load_image) caused by mishandling UTF-8 data. The connected documents corroborate the specific component and nature of the bug, and multiple advisories report the issue across various distributions (e....

CVE-2018-19491

Gnuplot 5.2.5 is affected by CVE-2018-19491 in the postscript terminal backend. The vulnerability occurs in the PS_options function due to a missing size check on an argument passed to set font, enabling a buffer overflow when arbitrary data is supplied. The issue is localized to the postscript b...

CVE-2018-19961

CVE-2018-19961 affects the Xen hypervisor up to 4.11.x on AMD x86, where guest OS users may gain host privileges due to TLB flushes not reliably occurring after IOMMU mapping changes. Public documents confirm Xen as the affected product and describe the root cause and potential privilege escalati...

CVE-2018-6003

CVE-2018-6003 affects GNU Libtasn1 (libtasn1) with unlimited recursion in _asn1_decode_simple_ber in decoding.c, leading to stack exhaustion and DoS. Affected product: Cloud Pak for Security (CP4S) versions 1.8.1.0, 1.8.0.0, 1.7.2.0. Remediation: upgrade to CP4S 1.9.0.0. See remediation guidance ...

CVE-2018-8905

CVE-2018-8905 is a LibTIFF issue affecting LibTIFF 4.0.9 and earlier. It describes a heap-based buffer overflow in the function LZWDecodeCompat (tif_lzw.c) triggered by a crafted TIFF file, with behavior demonstrated by tiff2ps. Connected advisories document the impact as cryptic but include pote...

CVE-2019-13458

CVE-2019-13458 affects Open Ticket Request System (OTRS) and its Community Edition: 7.0.x (up to 7.0.8), 5.0.x (up to 5.0.36) and 6.0.x (up to 6.0.19). An attacker with an agent login and appropriate permissions can abuse OTRS notification tags in templates to disclose hashed user passwords. Publ...

CVE-2019-19525

CVE-2019-19525 affects the Linux kernel prior to 5.3.6, where a use-after-free can be triggered by a malicious USB device via drivers/net/ieee802154/atusb.c (CID-7fd25e6fc035). The vulnerability has an availability impact and a MEDIUM base score (CVSS v3.1: 4.6) with LOCAL/PHYSICAL factors descri...

CVE-2019-7396

ImageMagick prior to 7.0.8-25 contains a memory leak in ReadSIXELImage (coders/sixel.c). The issue is documented as CVE-2019-7396. Affected releases may leak memory when processing SIXEL images; no other impact is described in the provided sources. Remediation: upgrade to ImageMagick 7.0.8-25 or ...

CVE-2020-11048

CVE-2020-11048 : In FreeRDP, versions up to and including 2.0.0 contain an out-of-bounds read that can abort a session (no data exfiltration). The issue is fixed in 2.0.0. Connected advisories confirm the same CVE entry and remediation, reinforcing that upgrading to 2.0.0+ eliminates the vulnerab...

CVE-2020-15978

CVE-2020-15978 affects Chromium/Google Chrome navigation in the renderer on Android before 86.0.4240.75. The issue is described as insufficient data validation in the navigation component, allowing a compromised renderer to bypass navigation restrictions via a crafted HTML page. Connected sources...

CVE-2020-16298

CVE-2020-16298 is a Ghostscript vulnerability affecting version 9.50 where a buffer overflow in the function mj_color_correct() (contrib/japanese/gdevmjc.c) could allow a remote attacker to cause a denial of service via a crafted PDF file. The issue is addressed in Ghostscript v9.51. Connected do...

CVE-2020-16301

CVE-2020-16301 affects Artifex Software Ghostscript v9.50. A buffer overflow in the function okiibm_print_page1() (devices/gdevokii.c) could allow a remote attacker to cause a denial of service via a crafted PDF file. The vulnerability is explicitly fixed in Ghostscript 9.51. The available connec...

CVE-2020-16310

CVE-2020-16310 : Ghostscript v9.50 contains a division-by-zero vulnerability in dot24_print_page() (devices/gdevdm24.c) that allows a remote attacker to cause a denial of service via a crafted PDF. The issue is fixed in Ghostscript v9.51. Affected product: Artifex Ghostscript (9.50). Impact: DoS ...

CVE-2020-25601

CVE-2020-25601 (Xen) : A lack of preemption in evtchn_reset() and evtchn_destroy() inside the FIFO event channel model can cause a guest with many active event channels to stall the hypervisor, enabling a local attacker (malicious or buggy guest kernel) to mount a Denial of Service affecting the ...

CVE-2020-6473

CVE-2020-6473 is a Blink/WebKit policy-enforcement error in Google Chrome prior to 83.0.4103.61 that could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. Documents from Debian and Arch Linux confirm the vulnerability in Chrome/...

CVE-2021-21114

CVE-2021-21114 affects the Chromium-based browser (Chromium/Google Chrome family) with an issue in the audio component prior to version 87.0.4280.141 . The root cause is described as a use-after-free leading to potential heap corruption when processing crafted HTML pages, enabling a remote attack...

CVE-2022-21723

CVE-2022-21723 affects PJSIP (pjproject) up to version 2.11.1. The issue arises when parsing an incoming SIP message that contains a malformed multipart, which can lead to an out-of-bounds read access. The vulnerability impacts all PJSIP users that accept SIP multipart. A patch has been committed...

CVE-2022-2953

CVE-2022-2953 affects LibTIFF 4.4.0 with an out-of-bounds read in extractImageSection (tools/tiffcrop.c:6905), enabling DoS via crafted TIFF files. A fix is available via commit 48d6ece8389b01129e7d357f0985c8f938ce3da3. Connected advisories show mitigations for various platforms (e.g., Amazon Lin...

CVE-2022-32209

CVE-2022-32209 affects rails-html-sanitizer: if an application overrides allowed_tags to include both 'select' and 'style', a cross-site scripting (XSS) vulnerability may be exploitable. The issue is triggered when developers configure sanitizer via Rails config, sanitize helper, or SafeListSanit...

CVE-2023-2459

CVE-2023-2459 affects Chromium-based browsers (Google Chrome/Chromium). The vulnerability is an inappropriate implementation in Prompts that allows a remote attacker to bypass permission restrictions through a crafted HTML page. Severity is described as Medium. Technical details across connected ...

CVE-2023-4781

CVE-2023-4781 affects Vim (vim/vim) prior to 9.0.1873. The issue is described as a heap-based buffer/overflow in code related to Vim’s substitution handling (vim_regsub_both) with multiple related CVEs cited in downstream advisories. Impact, as reported by the connected documents, includes potent...