CVE-2020-15983

CVE-2020-15983 affects the Chromium browser’s webUI component and is tied to insufficient data validation before version 86.0.4240.75 (ChromeOS) that could allow a local attacker to bypass content security policy with a crafted HTML page. Public advisories and vendor notes show fixes in the 86.0....

CVE-2016-5424

CVE-2016-5424 affects PostgreSQL up to version 9.5.x: remote authenticated users with CREATEDB or CREATEROLE can gain superuser privileges by supplying mishandled special characters (" , \, carriage return, or newline) in a database or role name during an administrative operation. Affected versio...

CVE-2017-7828

CVE-2017-7828 describes a use-after-free in Thunderbird/Firefox related to the PressShell object during layout flush and resize, causing potentially exploitable crashes. Affected products include Thunderbird < 52.5.0 and Firefox < 57 (and ESR

CVE-2018-1000140

CVE-2018-1000140 affects rsyslog librelp up to 1.2.14, with a stack-based buffer overflow in relpTcpChkPeerName when validating peer x509 certificates. This can enable remote code execution by a crafted certificate; impact is high/remote, exploitable over network without authentication. Public re...

CVE-2018-12022

CVE-2018-12022 affects FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (globally or for a property) and the service classpath contains the Jodd‑db jar (for Jodd DB access) with an LDAP service available, an attacker can trigger remote code executio...

CVE-2018-19540

CVE-2018-19540 : In JasPer, there is a heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input (libjasper/base/jas_icc.c). Reported vulnerable versions include 1.900.8–1.900.31 and 2.0.0–2.0.16. The connected documents do not provide an explicit exploit path or patch details wit...

CVE-2018-20433

CVE-2018-20433 affects c3p0 (version 0.9.5.2) via an XML External Entity (XXE) vulnerability in extractXmlConfigFromInputStream() during initialization of C3P0ConfigXmlUtils. Several connected advisories confirm the issue and reference a fix: upgrading to 0.9.5.4 (as reported in Mageia MGASA-2020...

CVE-2018-7253

CVE-2018-7253 affects WavPack 5.1.0, where ParseDsdiffHeaderConfig (cli/dsdiff.c) can cause a heap-based buffer over-read and possibly heap overwrite via a malicious DSDIFF file, leading to denial of service. The issue is confirmed in multiple advisories (e.g., Debian DSA entries) and FreeBSD/vux...

CVE-2018-8794

CVE-2018-8794 affects rdesktop up to version 1.8.3. The vulnerability is an integer overflow causing an out-of-bounds write in process_bitmap_updates(), leading to memory corruption and potential remote code execution when connecting to a malicious server. Multiple connected advisories confirm re...

CVE-2019-12746

CVE-2019-12746 affects Open Ticket Request System (OTRS) Community Edition: an agent login session ID could be disclosed by sharing a link to an embedded ticket article, enabling potential impersonation. Affected: OTRS 5.0.x up to 5.0.36 and 6.0.x up to 6.0.19. Impact: session impersonation risk ...

CVE-2019-14778

CVE-2019-14778 affects VideoLAN VLC media player 3.0.7.1, where the mkv::virtual_segment_c::seek method in demux/mkv/virtual_segment.cpp has a use-after-free. Connected sources confirm this vulnerability in VLC’s MKV demuxer and note that remediation from multiple advisories is to upgrade VLC to ...

CVE-2019-16218

CVE-2019-16218 affects WordPress prior to 5.2.3, where stored comments can trigger XSS. Root cause is an input handling flaw in comments that allows script injection. The issue is documented in the CVE entry as WordPress before 5.2.3 allows XSS in stored comments. Public references indicate WordP...

CVE-2020-11741

CVE-2020-11741 affects Xen hypervisor’s xenoprof feature in Xen 4.13.x and earlier. When active profiling is enabled, xenoprof trusts the guest in the shared ring and may allow a guest to obtain sensitive information about other guests, induce a host DoS, or possibly escalate privileges. The conn...

CVE-2020-20451

FFmpeg 4.2 contains a Denial of Service vulnerability (CVE-2020-20451) caused by resource management errors in fftools/cmdutils.c. Connected advisories from Debian and openSUSE/SUSE enumerate this CVE among a set of FFmpeg issues and indicate remediation via updated FFmpeg packages (examples: Deb...

CVE-2020-29570

CVE-2020-29570 affects Xen up to 4.14.x. The issue stems from reversed per-vCPU control block mappings and pointers, causing the consumer to treat initialized mappings as ready, enabling a guest DoS that can affect the entire host. Affected: Xen hypervisor through 4.14.x. Impact: remote-like DoS ...

CVE-2020-6460

CVE-2020-6460 concerns insufficient data validation in URL formatting in Chromium/Google Chrome prior to 81.0.4044.122, enabling domain spoofing via crafted domain names. Connected advisories show downstream fixes and versions: Debian/DSA-4714-1 notes Chromium updates around 83.0.4103.116 for sta...

CVE-2021-20308

CVE-2021-20308 affects HTMLDOC (1.9.11 and earlier). The vulnerability is an integer overflow in HTMLDOC’s image loading paths (image_load_jpeg and image_load_png in image.cxx) that can cause heap/buffer overflows, enabling arbitrary code execution and denial of service. Public advisories referen...

CVE-2021-21109

Chromium-based Chrome up to version 87.0.4280.141 is affected by CVE-2021-21109. The issue is a use-after-free in the payments component that can be triggered when the renderer process is compromised via a crafted HTML page, potentially enabling a sandbox escape. Impact is use of arbitrary code a...

CVE-2021-32815

CVE-2021-32815 affects Exiv2 (command-line and library) where an assertion failure occurs when modifying metadata of a crafted image file. This could allow a denial of service if a victim runs Exiv2 on a crafted image. The issue is triggered specifically by metadata modification and not by readin...

CVE-2021-4184

Wireshark CVE-2021-4184 is an infinite-loop DoS in the BitTorrent DHT dissector. Affected: Wireshark 3.6.0 and 3.4.0–3.4.10. Root cause: BitTorrent DHT parser infinite loop leading to application halt/crash via crafted capture files or packet injections. Publicly stated fixes exist in later Wires...

CVE-2021-43534

The CVE-2021-43534 entry concerns memory safety bugs in Mozilla Firefox 93 and Firefox ESR 91.2, with potential for memory corruption and possible arbitrary code execution. Affected products are Firefox < 94, Thunderbird < 91.3, and Firefox ESR

CVE-2021-43535

CVE-2021-43535 is a memory-safety vulnerability in Mozilla browsers where an HTTP2 session object could be released on a different thread, causing use-after-free, memory corruption, and a potentially exploitable crash. The consolidated information across sources indicates the issue affects Firefo...

CVE-2023-52672

CVE-2023-52672 affects the Linux kernel pipe handling code. A regression in pipe resizing caused writers to deadlock when a pipe was full during a resize because wakeups on pipe->wr_wait could occur before pipe->max_usage was updated. The fix changes the sequence: set max_usage (and nr_acco...

CVE-2024-46725

CVE-2024-46725 refers to a Linux kernel vulnerability where the drm/amdgpu path could trigger an out-of-bounds write warning. The connected Astra Linux bulletin confirms the issue as a kernel-level flaw and notes the fix was to validate the ring type value to prevent the OOB write. The vulnerabil...

CVE-2025-23150

CVE-2025-23150 affects the Linux kernel ext4 filesystem. The issue stems from an off-by-one error in do_split that can cause out-of-bounds access in ext4_insert_dentry, leading to a use-after-free condition (as detected via Syzkaller). The problem can occur during directory entry creation paths t...

CVE-2007-6353

CVE-2007-6353 is an integer overflow in the Exiv2 library (in exif.cpp) that allows context-dependent attackers to trigger a heap-based buffer overflow via a crafted EXIF file, potentially enabling arbitrary code execution. Public disclosures across multiple OS advisories confirm impact on libexi...

CVE-2008-1105

CVE-2008-1105 is a remote-code-execution vulnerability in Samba: a heap-based buffer overflow in receive_smb_raw() in util/sock.c affects Samba 3.0.0–3.0.29, exploitable via crafted SMB responses. Public advisories (e.g., CentOS/RHEL RHSA-2008:0290) confirm a fix was backported and updates releas...

CVE-2008-2371

CVE-2008-2371 describes a heap-based buffer overflow in the PCRE library (version 7.7) specifically in pcre_compile.c. This vulnerability can be triggered by a context-dependent attacker via a regular expression that begins with an option and contains multiple branches, potentially causing a deni...

CVE-2014-3707

CVE-2014-3707 affects libcurl/curl prior to a non-vulnerable build when using CURLOPT_COPYPOSTFIELDS, where curl_easy_duphandle incorrectly copies HTTP POST data, causing an out-of-bounds read. Affected products/versions cited in the documents include libcurl/curl 7.17.1 through 7.38.0, enabling ...

CVE-2015-7236

CVE-2015-7236 describes a use-after-free in rpcbind (xprt_set_caller in rpcb_svc_com.c) affecting rpcbind 0.2.1 and earlier. The vulnerability can be triggered by crafted PMAP_CALLIT packets over TCP/UDP, enabling a remote attacker to cause a denial-of-service (daemon crash). Connected sources do...

CVE-2015-8776

The CVE-2015-8776 issue affects the GNU C Library (glibc) strftime() function. The vulnerability, present in glibc versions before 2.23, allows context-dependent attackers to cause a denial of service (application crash) and, in some disclosures, potentially obtain sensitive information via out-o...

CVE-2016-1568

CVE-2016-1568 is a use-after-free in QEMU’s AHCI emulation (hw/ide/ahci.c) when IDE AHCI Emulation is enabled. A guest user can cause a denial of service (QEMU process crash) and potentially execute arbitrary code via an invalid AHCI NCQ AIO command. The issue is triggered by use-after-free in NC...

CVE-2016-5440

CVE-2016-5440 is an unspecified vulnerability in Oracle MySQL Server and MariaDB that can impact availability via Server: RBR. Affected are MySQL 5.5.49 and earlier, 5.6.30 and earlier, 5.7.12 and earlier, and MariaDB before 5.5.50; newer upstream fixes exist for MariaDB (e.g., 5.5.50, 10.0.26, 1...

CVE-2017-12424

The CVE-2017-12424 issue affects the shadow package (notably the newusers tool) across multiple distributions. A malformed input could cause internal data-structure corruption that leads to crashes or memory corruption, potentially crossing privilege boundaries in certain configurations (e.g., ho...

CVE-2017-5433

CVE-2017-5433 is a use-after-free in SMIL animation functions. Affected software includes Mozilla Firefox builds before 53 and Thunderbird before 52.1 ESR; the underlying issue arises when pointers to animation elements in an array are dropped from the animation controller while still in use, lea...

CVE-2018-10537

CVE-2018-10537 affects WavPack 5.1.0 and earlier. The issue lies in the W64 parser: ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks, enabling a memory write vulnerability. CVSS metrics indicate impact: CVSS2 (Partial confidentiality, integrity, and availability; network...

CVE-2018-10539

CVE-2018-10539 affects WavPack 5.1.0 and earlier for DSDiff input. The vulnerability stems from ParseDsdiffHeaderConfig not validating unknown chunk sizes before memory allocation, with lack of integer-overflow protection in a bytes_to_copy calculation leading to insufficient allocation and poten...

CVE-2018-15909

CVE-2018-15909 affects Artifex Ghostscript 9.23 (pre-2018-08-24). A type confusion in the .shfill PostScript operator can be triggered by specially crafted PostScript data, allowing an attacker to crash the Ghostscript interpreter or potentially execute arbitrary code. The vulnerability is docume...

CVE-2019-15142

CVE-2019-15142 affects DjVuLibre 3.5.27 in the DJVU reader component. The vulnerability arises in DjVmDir.cpp (and related GString handling) where the code reads a DJVU file into a GTArray and then uses a UTF-8 string path, leading to a heap-based out-of-bounds read and a denial-of-service crash ...

CVE-2019-18424

Xen vulnerability CVE-2019-18424 affects the Xen hypervisor (4.12.x) where, when PCI pass-through is used, deassignment of a PCI device from an untrusted domain can allow in-flight DMA to target host memory, risking host-OS privilege escalation. The issue arises because devices reassigned to dom0...

CVE-2019-9325

The CVE-2019-9325 issue affects the libvpx library (VP8/VP9 SDK) and is described as an out-of-bounds read caused by a missing bounds check. According to the provided documents, this could lead to remote information disclosure with no inherent execution privileges, and exploitation requires user ...

CVE-2020-11046

CVE-2020-11046 affects FreeRDP: an out-of-bounds seek in update_read_synchronize can lead to a later out-of-bounds read. Public advisories and Nessus/OS vendor records confirm this vulnerability in FreeRDP versions after 1.0 up to before 2.0.0. The connected advisories indicate remediation by upg...

CVE-2020-17538

Ghostscript vulnerability CVE-2020-17538: a buffer overflow in GetNumSameData() within contrib/lips4/gdevlips.c affects Ghostscript versions 9.18–9.50 and can cause a denial of service when processing crafted PDFs. The issue is fixed in v9.51; affected users should upgrade to Ghostscript 9.51 or ...

CVE-2020-25074

CVE-2020-25074 affects MoinMoin up to version 1.9.10, where the cache action in action/cache.py allows directory traversal via a crafted HTTP request, enabling remote code execution when an attacker can upload attachments. Multiple connected sources confirm the underlying issue and reference a fi...

CVE-2020-25675

CVE-2020-25675 : ImageMagick’s CropImage() and CropImageToTiles() perform rounding on unconstrained pixel offsets, causing undefined behavior via integer overflow/out-of-range values when processing untrusted input. The upstream patch constrains pixel offsets to prevent these issues. Affected: Im...

CVE-2020-25676

CVE-2020-25676 concerns ImageMagick. Multiple unconstrained pixel offset calculations in CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo() (in MagickCore/pixel.c) were evaluated with floor(), producing undefined behavior via out-...

CVE-2020-27841

CVE-2020-27841 affects the OpenJPEG2 library (openjpeg2) prior to version 2.4.0. The flaw occurs when an attacker provides crafted input to be processed by the OpenJPEG encoder, potentially causing an out-of-bounds read and impacting availability. The issue is evidenced in multiple connected advi...

CVE-2021-38001

CVE-2021-38001 is a type confusion in V8 of the Chromium engine (Chromium-based browsers) prior to version 95.0.4638.69. The issue could allow a remote attacker to trigger heap corruption via crafted HTML, potentially enabling arbitrary code execution. Publicly documented impact includes remote c...

CVE-2023-1818

CVE-2023-1818 is a use-after-free in Vulkan within Google Chrome’s rendering stack prior to version 112.0.5615.49, enabling potential heap corruption via a crafted HTML page. The vulnerability affects Chrome’s Vulkan-related code paths and has been reflected across multiple advisories (Debian DSA...

CVE-2023-2135

CVE-2023-2135 : Use-after-free in Chromium/Google Chrome DevTools prior to 112.0.5615.137 could allow a remote attacker to trigger heap corruption via a crafted HTML page after convincing a user to enable preconditions. Impact aligns with a high-severity heap corruption scenario. Affected product...