CVE-2021-28713

CVE-2021-28713 affects the hvc_xen (console) backend in Xen, where a malicious driver-domain can generate high-frequency events to exhaust guest interrupt handling and cause a Denial of Service. The initial entry notes three affected backends (blkfront CVE-2021-28711, netfront CVE-2021-28712, hvc...

CVE-2021-37978

CVE-2021-37978 is a heap-buffer-overflow in Blink (Chromium/Chrome) before version 94.0.4606.81 that could allow remote code execution via crafted HTML. Multiple connected sources (Chrome security update notes and Arch/Debian security advisories) confirm the issue and reference 94.0.4606.81 as th...

CVE-2021-37980

CVE-2021-37980 affects Chromium’s Sandbox component. An inappropriate implementation allowed sandbox escapes in versions before 94.0.4606.81, enabling a remote attacker to potentially bypass site isolation. The Debian/Arch/Fedora advisories indicate the fix is in Chromium 94.0.4606.81 or later; u...

CVE-2022-2867

libtiff’s tiffcrop utility has a uint32 underflow causing out-of-bounds read/write, enabling potential crash or exploitation when a user processes a crafted TIFF. The issue affects libtiff/tiffcrop across multiple distributions; remediation is to upgrade to a fixed libtiff version (examples in co...

CVE-2022-32087

CVE-2022-32087 affects MariaDB Server in versions 10.2 through 10.7, where processing of certain SQL statements can trigger a segmentation fault in Item_args::walk_args. The connected advisories (ALAS2023-037, ALAS2MARIADB10.5-2023-003, Debian DLA-3114-1, Debian/Red Hat trackers) confirm this as ...

CVE-2023-41360

CVE-2023-41360 – FRRouting FRR ahead-of-stream read of ORF header . The connected Nessus advisory for MiracleLinux 9 (FRR 8.x line) documents an issue in bgpd/bgp_packet.c where the initial byte of the ORF header can be read in an ahead-of-stream situation, affecting FRR releases up to 9.0. The C...

CVE-2011-4517

CVE-2011-4517 affects JasPer 1.900.1 used for JPEG-2000 decoding. The flaw is in libjasper/jpc/jpc_cs.c: jpc_crg_getparms uses an incorrect data type during a size calculation, enabling remote attackers to trigger a heap-based buffer overflow via a crafted CRG marker segment in a JPEG2000 file. C...

CVE-2015-0410

CVE-2015-0410 is a denial-of-service weakness in the OpenJDK/Hotspot DER decoder. A remote attacker could exploit a crafted DER-encoded input to trigger an infinite loop in the decoder, impacting availability. Public disclosures in Debian and CentOS advisories list OpenJDK 6/7 (and related Java S...

CVE-2015-2734

CVE-2015-2734 details (mode C): The vulnerability affects Mozilla Firefox (Direct3D 9 implementation) in Windows builds prior to 39.0, Firefox ESR 31.x prior to 31.8 and 38.x prior to 38.1, and Thunderbird prior to 38.1. The underlying issue is reading data from uninitialized memory locations in ...

CVE-2017-5465

CVE-2017-5465 is an out-of-bounds read in ConvolvePixel used when processing SVG content. The issue can crash the application and may copy memory into SVG content, potentially affecting rendering. Affected products include Thunderbird and Mozilla Firefox variants: Thunderbird < 52.1, Firefox E...

CVE-2017-7787

CVE-2017-7787 is a same-origin policy bypass vulnerability affecting Thunderbird and Firefox browsers. Affected products include Thunderbird versions older than 52.3, Firefox ESR older than 52.3, and Firefox older than 55. The issue occurs on pages with embedded iframes during page reloads, allow...

CVE-2017-7802

CVE-2017-7802 is a use-after-free in the DOM during an image element resize event. The vulnerability occurs when freed image elements are accessed due to lack of strong references, potentially causing a crash. Affected products/versions from the provided documents include Thunderbird < 52.3, F...

CVE-2017-7843

Summary (CVE-2017-7843) : In Firefox, Private Browsing mode could be exploited by a web worker to persist data in IndexedDB, enabling cross-session fingerprinting. Affected are Firefox ESR versions older than 52.5.2 and Firefox versions older than 57.0.1. The root cause is that IndexedDB remains ...

CVE-2017-9063

CVE-2017-9063 affects WordPress before 4.7.5 and is a stored XSS in the Customizer due to an invalid customization session. Impact: potential script execution in users’ browsers. remediation: upgrade WordPress to 4.7.5 or later. Notes from connected docs confirm the issue details and version boun...

CVE-2018-1071

CVE-2018-1071 : The connected advisories confirm a stack-based buffer overflow in zsh’s exec.c:hashcmd() (through version 5.4.2), enabling a local attacker to cause a denial of service. Affected products include zsh across multiple distributions (Amazon Linux 2, Debian, CentOS/RHEL, Fedora, Gento...

CVE-2018-11439

CVE-2018-11439 affects TagLib 1.11.1’s Ogg FLAC scanning code (TagLib::Ogg::FLAC::File::scan in oggflacfile.cpp). The vulnerability is a heap-based buffer over-read exposed by processing a crafted audio file, leading to information disclosure. Public‑facing references in connected documents indic...

CVE-2018-12265

CVE-2018-12265 affects Exiv2 0.26. The issue is an integer overflow in LoaderExifJpeg (preview.cpp) that can cause an out-of-bounds read in Exiv2::MemIo::read (basico.cpp). This is described across multiple advisories as a memory corruption/denial risk vector in the Exiv2 0.26 release. Connected ...

CVE-2018-17961

CVE-2018-17961 affects Artifex Ghostscript 9.25 and earlier. It enables sandbox bypass via vectors involving errorhandler setup, saved execution stacks, or the 1Policy operator, potentially allowing code execution or sandbox escape when processing crafted PostScript. The issue is related to an in...

CVE-2018-19476

Artifex Ghostscript before 9.26 contains a setcolorspace type confusion in psi/zicc.c that lets remote attackers bypass access restrictions. Affected: Ghostscript versions prior to 9.26 (e.g., 9.25 and earlier per advisories). Impact per sources ranges from information disclosure to potential cod...

CVE-2018-20181

CVE-2018-20181 affects rdesktop up to version 1.8.3, where an Integer Underflow triggers a Heap-Based Buffer Overflow in seamless_process(), causing memory corruption and potentially remote code execution. Public advisories confirm multiple CVEs in rdesktop with risk of denial of service, informa...

CVE-2018-8799

CVE-2018-8799 affects the rdesktop client; multiple sources indicate that versions up to 1.8.3 contain an out-of-bounds read in function process_secondary_order(), leading to a denial of service (segfault). Several connected advisories note that the issue is addressed in the 1.8.4 release series ...

CVE-2020-11741

CVE-2020-11741 affects Xen hypervisor’s xenoprof feature in Xen 4.13.x and earlier. When active profiling is enabled, xenoprof trusts the guest in the shared ring and may allow a guest to obtain sensitive information about other guests, induce a host DoS, or possibly escalate privileges. The conn...

CVE-2020-13254

Django CVE-2020-13254 affects Django 2.2 (before 2.2.13) and 3.0 (before 3.0.7). Root cause: memcached backends that do not validate keys can produce key collisions with malformed cache keys, enabling potential data leakage. Multiple upstream advisories (Arch Linux ASA-202006-8; Debian DSA-4705-1...

CVE-2020-15978

CVE-2020-15978 affects Chromium/Google Chrome navigation in the renderer on Android before 86.0.4240.75. The issue is described as insufficient data validation in the navigation component, allowing a compromised renderer to bypass navigation restrictions via a crafted HTML page. Connected sources...

CVE-2020-15992

CVE-2020-15992 affects Chromium-based browsers (Chromium/Google Chrome) before 86.0.4240.75, specifically the networking component. A remote attacker who already gained renderer-process access could bypass the same-origin policy via a crafted HTML page, with impacts including potential informatio...

CVE-2020-16007

CVE-2020-16007 is a vulnerability in the Chromium/Google Chrome installer: insufficient data validation in the installer can allow a local attacker to elevate privileges via a crafted filesystem. Public advisories indicate the fix was shipped in Chrome/Chromium around version 86.0.4240.183 (with ...

CVE-2020-25665

CVE-2020-25665 affects ImageMagick’s PALM image coder (coders/palm.c). The vulnerability arises from an improper call to AcquireQuantumMemory() in WritePALMImage() that should offset by 256; this can lead to an out-of-bounds read later in the routine. The fix patches the call by adding 256 to byt...

CVE-2020-27770

CVE-2020-27770 is an ImageMagick flaw caused by a missing check for a 0 value in replace_extent, which can let an offset p overflow in SubstituteString(), potentially impacting availability. Affected software: ImageMagick versions prior to 7.0.8-68. The connected security notes confirm the root c...

CVE-2020-28030

Wireshark’s GQUIC dissector (in versions 3.2.0–3.2.7) contains a crash risk due to incorrect offset advancement in epan/dissectors/packet-gquic.c. The vulnerability was fixed by correcting the implementation of offset advancement. Public references from Debian and Arch Linux advisories confirm th...

CVE-2020-6391

CVE-2020-6391 concerns Blink in Google Chrome. The vulnerability arises from insufficient validation of untrusted input in Blink, allowing a local attacker to bypass Content Security Policy via a specially crafted HTML page on Chrome versions prior to 80.0.3987.87. Affected product: Google Chrome...

CVE-2020-6473

CVE-2020-6473 is a Blink/WebKit policy-enforcement error in Google Chrome prior to 83.0.4103.61 that could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. Documents from Debian and Arch Linux confirm the vulnerability in Chrome/...

CVE-2021-20308

CVE-2021-20308 affects HTMLDOC (1.9.11 and earlier). The vulnerability is an integer overflow in HTMLDOC’s image loading paths (image_load_jpeg and image_load_png in image.cxx) that can cause heap/buffer overflows, enabling arbitrary code execution and denial of service. Public advisories referen...

CVE-2021-37971

CVE-2021-37971 affects Google Chrome up to 94.0.4606.54 where the Web Browser UI could be spoofed in the Omnibox via a crafted HTML page due to an incorrect security UI. The vulnerability allows a remote attacker to mislead users by altering the URL bar contents. The initial and connected documen...

CVE-2021-37972

CVE-2021-37972 relates to an out-of-bounds read in libjpeg-turbo used by Google Chrome (Chromium) before 94.0.4606.54, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product is Chrome/Chromium with libjpeg-turbo integration; root cause is a mem...

CVE-2021-37974

CVE-2021-37974 affects Google Chrome's Safebrowsing component and is a use-after-free vulnerability that could allow a remote attacker who compromises the renderer process to cause heap corruption via a crafted HTML page. The issue is rooted in Safe Browsing handling prior to version 94.0.4606.71...

CVE-2021-42530

CVE-2021-42530 affects Exempi (XMP Toolkit SDK) up to version 2021.07 and earlier, due to a stack-based buffer overflow that can lead to arbitrary code execution in the current user context. Exploitation requires the user to open a crafted file. Debian LTS advisories show patched packages: 2.5.2-...

CVE-2022-0581

Wireshark CMS dissector crash (CVE-2022-0581) affects Wireshark 3.6.0–3.6.1 and 3.4.0–3.4.11, causing denial of service via crafted capture files or packet injection. Connected advisories confirm the issue and list fixes in later Wireshark builds: e.g., Debian LTS DLA-2967-1 fixes include Wiresha...

CVE-2022-0909

CVE-2022-0909 affects libtiff 4.3.0 and its tiffcrop component, caused by a division-by-zero in computeOutputPixelOffsets() that can crash the application via a crafted TIFF file (DoS). Public advisories (Arch Linux ASA-202204-6, ALAS/ALAS2, Debian DSA-5108-1) indicate fixes in libtiff 4.3.0-2 or...

CVE-2022-20771

The CVE-2022-20771 issue affects the ClamAV TIFF file parser. It is a denial-of-service vulnerability that could be exploited by an unauthenticated, remote attacker by processing a crafted TIFF file. Affected versions include ClamAV 0.104.0–0.104.2 and the LTS line 0.103.5 and earlier. Public adv...

CVE-2022-20785

CVE-2022-20785 affects ClamAV HTML file parser. Vulnerable versions: 0.1040–0.1042 and LTS 0.103.5 and earlier. Condition: unauthenticated remote attacker can cause a denial-of-service on the affected device. Description points to the ClamAV blog for details; no exploit specifics are provided in ...

CVE-2022-3598

CVE-2022-3598 affects LibTIFF 4.4.0 via an out-of-bounds write in extractContigSamplesShifted24bits (tools/tiffcrop.c:3604), enabling denial-of-service with a crafted TIFF file. For those building LibTIFF from source, the fix is present in commit cfbb883b. Connected documents corroborate this iss...

CVE-2023-1668

CVE-2023-1668 — Open vSwitch (OVS) has a flaw where, when processing an IP packet with protocol 0, OVS installs a datapath flow whose action does not modify the IP header. This can cause a datapath rule matching all IP protocols (nw_proto wildcarded) to have an incorrect action, risking improper ...

CVE-2023-2135

CVE-2023-2135 : Use-after-free in Chromium/Google Chrome DevTools prior to 112.0.5615.137 could allow a remote attacker to trigger heap corruption via a crafted HTML page after convincing a user to enable preconditions. Impact aligns with a high-severity heap corruption scenario. Affected product...

CVE-2023-3421

CVE-2023-3421 is a use-after-free in Media in Google Chrome/Chromium prior to 114.0.5735.198 that could allow a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability is documented across multiple advisories confirming the affected component as Chromium’s media handli...

CVE-2023-4366

The CVE-2023-4366 entry describes a Use-after-free vulnerability in Chrome/Chromium Extensions prior to version 116.0.5845.96, potentially allowing heap corruption when a user is tricked into installing a malicious extension via a crafted HTML page. The issue is tied to the Extensions component, ...

CVE-2023-52672

In the Linux kernel, the following vulnerability has been resolved: pipe: wakeup wr_wait after setting max_usage Commit c73be61cede5 ("pipe: Add general notification queue support") aregression was introduced that would lock up resized pipes under certainconditions. See the reproducer in [1]. The...

CVE-2023-52686

CVE-2023-52686 involves a Linux kernel vulnerability where a null pointer check is missing in powerpc/powernv opal_event_init() and kasprintf() can return NULL on allocation failure. Exploitation could lead to a denial of service via NULL pointer dereference; this has been addressed with a kernel...

CVE-2024-26743

Technical details about CVE-2024-26743 are not provided in the supplied documents. Please monitor vendor advisories for affected products, impact, and fixes.

CVE-2024-27431

CVE-2024-27431 relates to the Linux kernel where, for XDP programs tied to a cpumap entry, the xdp_rxq_info structure backing the XDP invocation was not zero-initialized. This could cause xdp_md->rx_queue_index to reflect uninitialised memory values. The published fix zeros the rxq data struct...

CVE-2025-37797

CVE-2025-37797 affects the Linux kernel HFSC qdisc. A Use-After-Free can occur in hfsc_change_class() when handling certain child qdiscs (e.g., netem, codel) due to a time-of-check/time-of-use race: hfsc_change_class() may add a class to vttree after qdisc_peek_len() potentially clears the queue....