CVE-2018-16872

CVE-2018-16872 describes a TOCTTOU vulnerability in QEMU’s Media Transfer Protocol (MTP) handling. The code paths usb_mtp_get_object, usb_mtp_get_partial_object and usb_mtp_object_readdir don’t account for filesystem changes since the time of lstat(2) in usb_mtp_object_alloc, allowing an attacker...

CVE-2018-18607

CVE-2018-18607 is a NULL pointer dereference in elf_link_input_bfd (elfin GNU Binutils libbfd) when locating STT_TLS symbols without a TLS section. A crafted ELF can cause denial of service (DoS); impact is consistent with DoS in affected Binutils 2.31, including remote triggering via ld in demon...

CVE-2018-5683

CVE-2018-5683 is an out-of-bounds memory access in QEMU’s VGA emulator (vga_draw_text). The vulnerability allows a privileged guest OS user to cause a Denial of Service by crashing the QEMU process due to improper memory address validation. The issue is discussed across multiple advisories (Debia...

CVE-2018-6086

CVE-2018-6086 is a use-after-free in Google Chrome’s Networking Disk Cache caused by a double-eviction in Incognito mode. The issue affects Chrome/Chromium prior to version 66.0.3359.117 (fixed in the 66.0.3359.117 release, per Debian security advisories and the Chrome stable-channel blog). A rem...

CVE-2019-14433

The CVE-2019-14433 issue affects OpenStack Nova (versions before 17.0.12, 18.x before 18.2.2, 19.x before 19.0.2). It allows authenticated API requests that fault to leak environment details in responses, potentially exposing sensitive configuration data (partial confidentiality impact). Red Hat ...

CVE-2019-14533

CVE-2019-14533 affects VideoLAN VLC media player 3.0.7.1, where the control function of demux/asf/asf.c has a use-after-free vulnerability. Public sources in the connected documents confirm this specific ASF demuxer use-after-free (notable in the 3.0.7.1 release) and document that the issue has b...

CVE-2019-16217

WordPress, versions before 5.2.3, is affected by an XSS flaw in media uploads due to mishandling of wp_ajax_upload_attachment. The underlying issue is improper handling of upload attachments that allows cross-site scripting. The impact is XSS in the context of media uploads, with no other vectors...

CVE-2020-13596

CVE-2020-13596 affects Django 2.2.x prior to 2.2.13 and 3.0.x prior to 3.0.7. The issue is an XSS vulnerability arising from query parameters generated by the admin ForeignKeyRawIdWidget not being properly URL encoded, enabling cross-site scripting. Several advisories note that upgrading Django t...

CVE-2020-15238

Blueman before 2.1.4 is affected by an argument-injection vulnerability in the DhcpClient D-Bus method of blueman-mechanism. Local attackers may escalate privileges depending on system configuration: with Polkit-1 disabled and versions

CVE-2020-16309

CVE-2020-16309 : Ghostscript v9.50 contains a buffer overflow in lxm5700m_print_page() (devices/gdevlxm.c) that can be exploited remotely via a crafted EPS file to cause a DoS. Root cause: bounds-check failure in that printer/page rendering path. A fix is available in Ghostscript v9.51; upgrade t...

CVE-2020-16588

The CVE-2020-16588 entry concerns a Null Pointer Deference in OpenEXR 2.3.0 (generatePreview in makePreview.cpp) that can lead to denial of service via a crafted EXR file. Connected sources show multiple distributions releasing fixes (e.g., Debian openexr updates addressing CVE-2020-16588; openSU...

CVE-2020-22020

CVE-2020-22020 is a buffer overflow in FFmpeg 4.2 affecting libavfilter/vf_fieldmatch.c (build_diff_map). A remote attacker could exploit crafted input to cause a Denial of Service. Public advisories (Ubuntu USN-5472-1, Debian DSA-4990) list FFmpeg upgrades to patched builds (e.g., FFmpeg 4.2.x w...

CVE-2020-22023

Summary: CVE-2020-22023 is a heap-based Buffer Overflow in FFmpeg 4.2 within filter_frame (libavfilter/vf_bitplanenoise.c) that can cause memory corruption. The issue is one of many FFmpeg CVEs reported across multiple advisories (Debian, Ubuntu USN-5472-1, openSUSE, etc.), all describing memory ...

CVE-2020-22044

Summary: CVE-2020-22044 is a Denial of Service vulnerability in FFmpeg 4.2 due to a memory leak in url_open_dyn_buf_internal() of libavformat/aviobuf.c. The issue is confirmed in multiple advisories referencing FFmpeg 4.2, with DoS via memory exhaustion potentially affecting affected builds. The ...

CVE-2021-32739

CVE-2021-32739 affects Icinga 2 from 2.4.0 through 2.12.4, enabling privilege escalation for authenticated API users. With a read-only user’s credentials, an attacker can view most attributes of config objects, including ApiListener.ticket_salt, which can be used to forge a ticket and impersonate...

CVE-2021-45942

CVE-2021-45942 affects OpenEXR 3.1.x prior to 3.1.4. The issue is a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute, triggered when called from the IlmThread_3_1 thread pool (NullThreadPoolProvider::addTask / ThreadPool::addGlobalTask). The public description notes this vulnerab...

CVE-2022-0319

CVE-2022-0319 is an out-of-bounds read in Vim (vim/vim) prior to 8.2. The Debian LTS advisory for Vim lists CVE-2022-0319 among multiple Vim-related fixes and notes that upgrades to newer Vim packages address the issue. Affected product: Vim on Debian/Ubuntu family (and related Vim packages in ot...

CVE-2022-2905

CVE-2022-2905 is an out-of-bounds memory read in the Linux kernel’s BPF subsystem, exploitable by a local user via bpf_tail_call with a map key larger than max_entries. The Debian LTS advisory DLA-3173-1 (linux-5.10) lists CVE-2022-2905 among others and notes that an update to linux-5.10-149-2~de...

CVE-2023-2467

Google Chrome on Android prior to 113.0.5672.63 is affected by CVE-2023-2467 due to an inappropriate implementation in Prompts, which could allow a remote attacker to bypass permissions restrictions via a crafted HTML page. The impact is a permissions bypass without other code execution details p...

CVE-2023-37369

CVE-2023-37369 affects Qt bases (Qt5/Qt6) with a vulnerability in QXmlStreamReader triggered by a crafted XML string, potentially causing an application crash due to a prefix-length handling bug. The issue is tied to Qt base components (qtbase-opensource-src) and has been addressed in multiple ad...

CVE-2023-4360

CVE-2023-4360 affects Color in Google Chrome (Chromium) prior to 116.0.5845.96. A remote attacker could craft an HTML page to obfuscate security UI. The issue is confirmed public in Chromium’s advisory and Chrome/Debian updates note the fix in version 116.0.5845.96 (and later). Remediation: upgra...

CVE-2023-4362

CVE-2023-4362 affects Google Chrome/Chromium prior to 116.0.5845.96. It is a heap buffer overflow in Mojom IDL that could allow a remote attacker who has already compromised the renderer process and gained control of a WebUI process to trigger heap corruption via a crafted HTML page, with impact ...

CVE-2023-50762

CVE-2023-50762 affects Thunderbird≤115.5 (specifically Thunderbird

CVE-2024-26851

CVE-2024-26851: Linux kernel nf_conntrack_h323 decoding bug fixed. UBSAN reported negative/out-of-bounds shifts when decoding Ras messages due to abnormal skb->data; patch adds protection to keep extension bitmap length

CVE-2024-27052

CVE-2024-27052 affects the Linux kernel driver for rtl8xxxu (wifi) and is fixed by adding cancel_work_sync() in rtl8xxxu_stop() to prevent a potential use-after-free when the driver’s workqueue is still running after stop. The initial entry describes the issue and patch in general terms; connecte...

CVE-2024-36889

CVE-2024-36889 concerns the Linux kernel’s MPTCP code. The issue arises when a client falls back to TCP during connect, and snd_nxt is not initialized yet; an incoming ACK could copy that uninitialized value into snd_una. If the MPTCP worker then re-injects data, it may trigger a cleanup using a ...

CVE-2025-37756

CVE-2025-37756 relates to the Linux kernel TLS stack. The vulnerability arises from allowing a TLS socket disconnect, which can trigger unexpected corner cases in the TLS receive path. The fix is a kernel patch that explicitly disallows disconnect in net/tls, reducing the risk of abusive disconne...

CVE-2014-3591

CVE-2014-3591 affects Libgcrypt (before 1.6.3) and GnuPG (before 1.4.19), which do not implement ciphertext blinding for ElGamal decryption, enabling physically proximate attackers to potentially extract private keys via crafted ciphertext and EM field fluctuations during multiplication. Related ...

CVE-2015-7974

CVE-2015-7974 concerns the NTP reference implementation. The issue arises when authenticated packets are processed: symmetric-key peer associations are not properly verified, potentially enabling a remote attacker to impersonate a trusted peer (skeleton key). Affected are NTP 4.x prior to 4.2.8p6...

CVE-2016-1000343

CVE-2016-1000343 affects the Bouncy Castle JCE Provider (1.55 and earlier). When the JCA key pair generator is not explicitly initialised with DSA parameters, it may generate a weak private key by assuming a 1024-bit key size. Publicly available documents confirm this issue and recommend either e...

CVE-2016-10244

CVE-2016-10244 affects FreeType 2 up to version 2.6.x (before 2.7). The vulnerability is in parse_charstrings (type1/t1load.c) where a font may lack a glyph name, enabling a crafted font to cause a heap-based buffer over-read and remote denial of service. Connected advisories confirm fixes in dow...

CVE-2017-10672

The CVE-2017-10672 issue affects the Perl XML-LibXML module; a use-after-free in XML-LibXML up to version 2.0129 allows remote attackers to execute arbitrary code by controlling arguments to replaceChild. The Nessus/OSINT entries confirm the vulnerability exists in multiple distro packages (e.g.,...

CVE-2017-5204

tcpdump (IPv6 parser) is affected by a buffer overflow in ip6_print() prior to version 4.9.0, allowing potential arbitrary code execution or crash via crafted input. The public details consistently reference CVE-2017-5204 and indicate the issue is mitigated by upgrading tcpdump to 4.9.0 or later....

CVE-2017-5429

CVE-2017-5429 involves memory safety bugs in Mozilla Firefox (52 and ESR 45.8/52) and Thunderbird 52. Some bugs show memory corruption and could be exploited to run arbitrary code. Affected: Thunderbird < 52.1; Firefox ESR < 45.9, < 52.1; Firefox

CVE-2017-5435

CVE-2017-5435 is a use-after-free in Firefox/Thunderbird during editor design-mode transaction processing, causing a potentially exploitable crash. Public details place affected products as Firefox/Firefox ESR and Thunderbird prior to certain fixed versions (e.g., Thunderbird < 52.1, Firefox E...

CVE-2017-6312

CVE-2017-6312 : In gdk-pixbuf, an integer overflow in io-ico.c allows an attacker to cause a denial of service (segmentation fault and crash) via a crafted ICO image entry offset, triggering an out-of-bounds read. Impact is a DoS; exploitation details are documented in multiple advisories. Mitiga...

CVE-2017-6814

CVE-2017-6814 affects WordPress

CVE-2018-14653

CVE-2018-14653 affects GlusterFS up to versions 4.1.4 and 3.12, with a heap-based buffer overflow in the __server_getspec path triggered by the gf_getspec_req RPC message. A remote authenticated attacker could cause a denial of service and potentially other unspecified impact. Connected advisorie...

CVE-2019-14777

The CVE-2019-14777 entry affects VideoLAN VLC media player (3.0.7.1) with a use-after-free in the MKV demuxer (demux/mkv/mkv.cpp). Public documentation in connected sources confirms this vulnerability in VLC’s MKV demuxer and notes downstream advisories recommending upgrade; no exploit details ar...

CVE-2019-18425

CVE-2019-18425 affects Xen across 3.2+ and enables privilege escalation in 32-bit PV guests due to missing descriptor table limit checks in x86 PV emulation. The vulnerability is limited to 32-bit PV guest user mode; HVM/PVH/64-bit PV guests and ARM are not affected. Exploitation would let a gues...

CVE-2019-5429

CVE-2019-5429 affects FileZilla and is caused by an untrusted search path that allows privilege escalation via a malicious ‘fzsftp’ binary placed in a user’s home directory. The vulnerability impacts FileZilla versions before 3.41.0-rc1 and is described in multiple sources (e.g., Debian DLA-3026-...

CVE-2021-1094

CVE-2021-1094 affects the NVIDIA GPU Display Driver for Windows and Linux, with a vulnerability in the kernel-mode layer (nvlddmkm.sys) handling of DxgkDdiEscape. An out-of-bounds array access may enable denial of service or information disclosure. Publicly documented mitigations include vendor/O...

CVE-2021-37620

Exiv2 (the command-line utility and C++ library) has an out-of-bounds read vulnerability in versions ≤ 0.27.4 when reading metadata from crafted images, which could lead to denial of service. The issue is fixed in version 0.27.5. Affected users should upgrade to 0.27.5 or later to remediate. The ...

CVE-2021-37993

CVE-2021-37993 describes a use-after-free in the PDF Accessibility component of the Chromium-based Google Chrome prior to 95.0.4638.54, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome’s PDF Accessibility path (Chro...

CVE-2021-44730

CVE-2021-44730 affects snapd: 2.54.2 did not validate the location of the snap-confine binary, enabling a local attacker to hardlink it elsewhere and cause snap-confine to execute arbitrary binaries, achieving privilege escalation. Affected systems may gain root/privilege escalation locally. Reme...

CVE-2022-47518

CVE-2022-47518 affects the Linux kernel before 6.0.11, specifically the WILC1000 wireless driver (drivers/net/wireless/microchip/wilc1000/cfg80211.c). The issue is missing validation of the number of channels, which can trigger a heap-based buffer overflow when copying the list of operating chann...

CVE-2023-4366

The CVE-2023-4366 entry describes a Use-after-free vulnerability in Chrome/Chromium Extensions prior to version 116.0.5845.96, potentially allowing heap corruption when a user is tricked into installing a malicious extension via a crafted HTML page. The issue is tied to the Extensions component, ...

CVE-2024-35845

CVE-2024-35845 : In the Linux kernel, the wifi iwlwifi dbg-tlv path (iwl_fw_ini_debug_info_tlv) could be used to trigger a denial-of-service through an improperly terminated string. The root cause is a missing NUL termination, which could be exploited remotely (network) and yields a CRITICAL impa...

CVE-2024-47697

CVE-2024-47697: Linux kernel dvb-frontends rtl2830 had an out-of-bounds write via rtl2830_pid_filter due to a boundary check allowing index 32. The patch updates the boundary to index >= 32 (instead of index > 32) and enforces that dev->filters, a 32-bit bitmap, uses set_bit/clear_bit on...

CVE-2025-22921

CVE-2025-22921 affects FFmpeg (git master) with a segmentation fault in the JPEG2000 decoder path (/libavcodec/jpeg2000dec.c). Affected component is FFmpeg; root cause is a segmentation violation in that decoder. Exploitation details are not provided in the connected documents; Debian LTS advisor...