CVE-2017-7785

CVE-2017-7785 is a buffer overflow in ARIA attribute handling within the DOM that affects Thunderbird (< 52.3) and Firefox components (Firefox ESR < 52.3, Firefox

CVE-2017-7800

CVE-2017-7800 is a use-after-free in WebSockets that can trigger a crash when the connection object is freed before disconnection finishes. Affected: Thunderbird < 52.3, Firefox ESR < 52.3, Firefox

CVE-2017-7802

CVE-2017-7802 is a use-after-free in the DOM during an image element resize event. The vulnerability occurs when freed image elements are accessed due to lack of strong references, potentially causing a crash. Affected products/versions from the provided documents include Thunderbird < 52.3, F...

CVE-2017-7826

CVE-2017-7826 ties to memory-safety bugs in Firefox 56/ESR 52.4 and Thunderbird prior to 52.5. Affected versions: Firefox < 57, Firefox ESR < 52.5, Thunderbird

CVE-2017-7843

Summary (CVE-2017-7843) : In Firefox, Private Browsing mode could be exploited by a web worker to persist data in IndexedDB, enabling cross-session fingerprinting. Affected are Firefox ESR versions older than 52.5.2 and Firefox versions older than 57.0.1. The root cause is that IndexedDB remains ...

CVE-2018-1000069

CVE-2018-1000069 affects FreePlane

CVE-2018-12265

CVE-2018-12265 affects Exiv2 0.26. The issue is an integer overflow in LoaderExifJpeg (preview.cpp) that can cause an out-of-bounds read in Exiv2::MemIo::read (basico.cpp). This is described across multiple advisories as a memory corruption/denial risk vector in the Exiv2 0.26 release. Connected ...

CVE-2018-19967

The CVE-2018-19967 issue concerns the Xen hypervisor (through 4.11.x) on Intel x86: guest OS users could cause a host hang due to Xen not mitigating Intel’s mishandling of certain HLE transactions tied to the KACQUIRE prefix. Connected sources (openSUSE/SUSE advisories and Xen advisories) confirm...

CVE-2018-20189

GraphicsMagick 1.3.31 is affected by CVE-2018-20189 in the ReadDIBImage function (coders/dib.c). A crafted DIB image that exploits direct pixel values with colormapping (not supported beyond 8-bits/sample) can trigger missing indexes initialization, causing a crash and denial of service. No furth...

CVE-2018-6555

CVE-2018-6555 is a Linux kernel local use-after-free via the irda_setsockopt path in irda/af_irda.c (and later in staging/irda), potentially causing memory corruption, denial of service, or a system crash. Affected trees reference IRDA socket usage as the attack vector. The vulnerability is addre...

CVE-2019-11506

CVE-2019-11506 affects GraphicsMagick versions 1.3.30 through 1.4 snapshot-20190403 Q8, where a heap-based buffer overflow occurs in WriteMATLABImage (coders/mat.c) related to ExportRedQuantumType in magick/export.c. The consequence is denial of service and possibly other impact via a crafted ima...

CVE-2019-15144

DjVuLibre 3.5.27 contains a denial-of-service flaw in GArrayTemplate::sort triggered by crafted PBM files (libdjvu/GContainer.h). This CVE is CVE-2019-15144. Connected advisories (Debian, Mageia, Gentoo, Fedora, Cloud Foundry, Astra Linux) confirm the issue and note fixes/updates to djvulibre pac...

CVE-2019-9894

PuTTY (before 0.71) is affected by CVE-2019-9894: a remotely triggerable memory overwrite can occur during RSA key exchange prior to host key verification. Open-source advisories and vendor updates indicate this was addressed in PuTTY 0.71 and newer. The vulnerability enables memory corruption wi...

CVE-2020-11045

CVE-2020-11045 refers to FreeRDP and describes an out-of-bounds read in update_read_bitmap_data that can cause client memory to be read into an image buffer, with the display affected (shown as color). The connected advisories ( MiracleLinux, Rocky Linux/AlmaLinux, Debian, Red Hat, Oracle Linux, ...

CVE-2020-15984

CVE-2020-15984 affects Google Chrome on iOS before 86.0.4240.75, where the Omnibox (URL bar) does not enforce policies correctly, enabling a remote attacker to spoof the Omnibox via a crafted URL. Several advisories (Debian, FreeBSD, Arch) indicate the fixed version is 86.0.4240.75 or later, impl...

CVE-2020-16007

CVE-2020-16007 is a vulnerability in the Chromium/Google Chrome installer: insufficient data validation in the installer can allow a local attacker to elevate privileges via a crafted filesystem. Public advisories indicate the fix was shipped in Chrome/Chromium around version 86.0.4240.183 (with ...

CVE-2020-16297

CVE-2020-16297 describes a buffer overflow in Ghostscript: FloydSteinbergDitheringC() in contrib/gdevbjca.c affects Ghostscript 9.18–9.50 and can allow a remote attacker to cause a denial of service via a crafted PDF file. The issue is fixed in Ghostscript v9.51. Affected products and exact compo...

CVE-2020-25863

Wireshark vulnerability CVE-2020-25863 affects multiple releases (3.2.0–3.2.6, 3.0.0–3.0.13, 2.6.0–2.6.20). The MIME Multipart dissector could crash due to incorrect deallocation of invalid MIME parts in epan/dissectors/packet-multipart.c. The issue was fixed by correcting that deallocation, with...

CVE-2020-27760

CVE-2020-27760 affects ImageMagick. In GammaImage() (MagickCore/enhance.c), certain gamma values can trigger a divide-by-zero when processing crafted input, potentially impacting availability. A patch uses PerceptibleReciprocal() to prevent the division by zero. Affected: ImageMagick versions pri...

CVE-2021-21115

CVE-2021-21115 : In Google Chrome before 87.0.4280.141, a use-after-free in the Safe Browsing component could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. This is confirmed in connected advisories (e.g., Arch Linux ASA-202101-6) referencing Chromium ...

CVE-2021-37968

The CVE-2021-37968 entry describes an insecure implementation in the Background Fetch API in Google Chrome, leading to potential cross-origin data leakage via a crafted HTML page. Affected software: Google Chrome (Background Fetch API); root cause: improper handling in the API implementation; imp...

CVE-2022-1122

CVE-2022-1122 affects openjpeg2 2.4.0, specifically opj2_decompress when processing a directory with many files. The issue is a failed buffer allocation for directory filenames leading to free() on an uninitialized pointer, causing a segmentation fault and denial of service. Connected advisories ...

CVE-2022-1355

CVE-2022-1355 affects libtiff/tiffcp: a stack-buffer-overflow in tiffcp.c (main()) allows crafting TIFF files to crash the tiffcp tool, causing DoS. Multiple advisories confirm the issue and provide fixes for libtiff, with Debian/Red Hat/Amazon Linux advisories detailing patched versions (e.g., D...

CVE-2022-2978

CVE-2022-2978 – NILFS use-after-free in Linux kernel : A local attacker could trigger a use-after-free in nilfs_mdt_destroy via security_inode_alloc, potentially crashing the system or enabling privilege escalation. This vulnerability is tied to the NILFS filesystem in the Linux kernel. The conne...

CVE-2022-3176

CVE-2022-3176 describes a use-after-free in the Linux kernel’s io_uring subsystem. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task, and the POLLFREE notification is sent to all waiters before the queue is freed, but io_uring poll does not handle POLLFREE. This...

CVE-2022-33742

Summary: CVE-2022-33742 is tied to Linux Block and Network PV frontends leaking data due to sharing memory regions without zeroing and because grant-table granularity may expose data within the same 4K page as data shared with a backend. This is described alongside related CVEs (CVE-2022-26365, C...

CVE-2022-3598

CVE-2022-3598 affects LibTIFF 4.4.0 via an out-of-bounds write in extractContigSamplesShifted24bits (tools/tiffcrop.c:3604), enabling denial-of-service with a crafted TIFF file. For those building LibTIFF from source, the fix is present in commit cfbb883b. Connected documents corroborate this iss...

CVE-2023-34969

CVE-2023-34969 affects the dbus package. D-Bus before 1.15.6 may allow an unprivileged user to crash dbus-daemon when a privileged user uses org.freedesktop.DBus.Monitoring to observe traffic; on the system bus this yields a denial-of-service. Affected versions are before 1.15.6; fixed in 1.12.28...

CVE-2023-36661

CVE-2023-36661 affects Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider. The underlying issue is a server-side request forgery (SSRF) via a crafted KeyInfo element in XML signatures. This yields unauthenticated SSRF risk with impact on availability (per CVE ...

CVE-2023-37201

CVE-2023-37201 is a WebRTC-related use-after-free in Firefox/Thunderbird: an attacker could trigger memory corruption during HTTPS WebRTC setup. Affected: Firefox <115, Firefox ESR <102.13, Thunderbird

CVE-2023-4351

CVE-2023-4351 is a use-after-free in Chromium/Google Chrome networking path exploited via a crafted HTML page, allowing remote heap corruption. The issue affects Google Chrome before version 116.0.5845.96 and is classed with High severity. Multiple connected advisories (e.g., Debian DSA-5479, Gen...

CVE-2023-6856

CVE-2023-6856 describes a heap-buffer-overflow in the WebGL DrawElementsInstanced path when run with the Mesa VM driver. Impacted products include Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox

CVE-2024-41073

CVE-2024-41073 affects the Linux kernel NVMe driver: a discarded special payload could be double-freed on a retry unless RQF_SPECIAL_LOAD is cleared during request cleanup. The fix is to clear RQF_SPECIAL_LOAD when cleaning the request to prevent the double-free scenario; multiple advisories (ALM...

CVE-2026-3497

OpenSSH CVE-2026-3497 concerns a flaw in the GSSAPI Key Exchange patch applied by several Linux distributions, not in the upstream OpenSSH project. The bug occurs when sshpkt_disconnect() is used on an error and does not terminate the process, allowing an attacker to send an unexpected GSSAPI mes...

CVE-1999-0038

CVE-1999-0038 describes a buffer overflow in the xlock program that allows local users to execute commands as root. The connected sources (Red Hat CVE entry, PT Security listing, and multiple feeds) corroborate a local-privilege escalation due to a buffer overflow in xlock, but the documents do n...

CVE-2014-0460

CVE-2014-0460 is an IBM-related vulnerability described as flaws in the JNDI DNS service provider that can enable spoofing DNS responses, impacting confidentiality and integrity (partial). Exploitation status is not indicated in the IBM bulletins. Affected IBM product: IBM System Networking Switc...

CVE-2015-5165

CVE-2015-5165 affects the RTL8139 emulation in QEMU (C+ mode offload) used by Xen 4.5.x and earlier. A remote attacker could read heap memory in the QEMU process via unspecified vectors, potentially exposing host data. Public sources in connected docs document this as an information-leak flaw in ...

CVE-2016-3171

Drupal 6.x before 6.38 is vulnerable when used with PHP < 5.4.45, 5.5.x < 5.5.29, or 5.6.x

CVE-2017-2615

The CVE-2017-2615 issue affects QEMU’s Cirrus CLGD 54xx VGA emulator support. The vulnerability is an out-of-bounds access during VGA data copying via bitblt in backward mode, which could allow a privileged guest user to crash the QEMU process and potentially execute arbitrary host code with QEMU...

CVE-2017-3257

CVE-2017-3257 affects the MySQL Server component (Server: InnoDB). Affected: MySQL 5.6.34 and earlier and 5.7.16 and earlier. Description from multiple sources: an attacker with network access via multiple protocols and low privileges can exploit this to cause a hang or a repeated crash (partial ...

CVE-2017-5438

CVE-2017-5438 is a use-after-free in XSLT processing caused by the result handler being held by a freed handler. Publicly documented impact includes crashes and potential code execution in affected Mozilla products. Affected: Firefox

CVE-2017-5439

CVE-2017-5439 is a use-after-free in XSLT processing caused by improper handling of template parameters (nsTArray Length()) in Mozilla code, affecting Firefox and Thunderbird. It targets Firefox < 53 (and related ESR branches) and Thunderbird

CVE-2017-7810

CVE-2017-7810 refers to memory-safety bugs reported in Firefox 55 and Firefox ESR 52.3, with potential to exploit memory corruption to run arbitrary code. Connected documents confirm that Thunderbird

CVE-2018-14609

CVE-2018-14609 affects the Linux kernel (up to 4.17.10) with an invalid pointer dereference in __del_reloc_root() of fs/btrfs/relocation.c when mounting a crafted Btrfs image. The issue is triggered by removing reloc rb_trees when reloc control has not been initialized, leading to potential denia...

CVE-2018-15911

CVE-2018-15911 affects Artifex Ghostscript 9.23 prior to 2018-08-24. Attackers able to supply crafted PostScript can trigger uninitialized memory access in the aesdecode operator, potentially crashing the interpreter or executing code. Exploitation status is not detailed in the provided documents...

CVE-2018-18073

CVE-2018-18073 describes a sandbox-bypass vulnerability in Artifex Ghostscript. The issue arises in Ghostscript 9.25 and earlier where the saved execution stack can leak operator arrays or expose system operators in an error object, allowing a crafted PostScript to bypass -dSAFER/sandbox protecti...

CVE-2018-18584

CVE-2018-18584 affects libmspack and cabextract. In mspack/cab.h, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write (before 0.8alpha for libmspack and before 1.8 for cabextract). Remediation involves upgrading to fixed versions (e.g....

CVE-2019-9897

PuTTY before version 0.71 is vulnerable to multiple denial-of-service attacks that can be triggered by writing to the terminal (CVE-2019-9897). The connected advisories indicate fixes in upstream PuTTY 0.71 and security updates across distributions (openSUSE/SUSE, Debian), resolving this and rela...

CVE-2020-12284

FFmpeg contains a heap-based buffer overflow in libavcodec/cbs_jpeg.c (cbs_jpeg_split_fragment) in versions 4.1 and 4.2.2, triggered during JPEG_MARKER_SOS processing due to a missing length check. This could lead to memory corruption. Several advisories reference CVE-2020-12284; fixes were issue...

CVE-2020-16304

Ghostscript (Artifex) v9.18–v9.50 contains a buffer overflow in image_render_color_thresh() in base/gxicolor.c that could allow a remote attacker to escalate privileges via a crafted EPS file. The issue is addressed in v9.51. Connected sources corroborate the vulnerability in Ghostscript and refe...