CVE-2021-20190

CVE-2021-20190 is a Jackson Databind deserialization vulnerability involving the interaction between serialization gadgets and typing, present in Jackson Databind up to 2.9.10.7. The IBM bulletin for Cloudera Observability confirms this CVE as part of a collection and notes a fix in Cloudera Obse...

CVE-2018-14550

CVE-2018-14550 corresponds to a stack-based buffer overflow in libpng 1.6.35’s PNM decoding path, specifically in get_token() within pnm2png.c of pnm2png. The issue is triggered during third-party PNM decoding and is documented across multiple advisories (EulerOS, Gentoo GLSA, GN/NET, etc.). The ...