Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.Jan 10, 2022
- High7.8In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.Jan 6, 2022
- High7.5GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segme…Nov 15, 2021
- High8.8Apple Multiple Products WebKit Integer Overflow VulnerabilityKEVEPSS 3.5%Sep 8, 2021
- High7.8Apple Multiple Products Integer Overflow or Wraparound VulnerabilityKEVEPSS 7.0%Aug 24, 2021
- High7.8Apple Multiple Products Integer Overflow VulnerabilityKEVEPSS 76.0%Aug 24, 2021
- Medium5.5An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a larg…Jul 30, 2021
- Critical9.1The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted…Jul 22, 2021
- Critical9.8There's a flaw in lz4.Jun 2, 2021
- High7.5An issue was discovered in p11-kit 0.21.1 through 0.23.21.Dec 16, 2020
- High8.6Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.Jun 5, 2020
- High8.2Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.Jun 5, 2020
- Medium5.5SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.May 24, 2020
- High7.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.May 9, 2020
- High8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.Mar 12, 2020
- High8.1In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…Oct 21, 2019
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…Oct 9, 2019
- Low3.7An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.May 28, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit sign…Mar 25, 2019
- High8.8An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.Mar 25, 2019
- High8.8A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side.Mar 25, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.Mar 21, 2019
- High8.8Google Chromium V8 Integer Overflow VulnerabilityKEVEPSS 60.3%Nov 14, 2018
- Critical9.8International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.Nov 4, 2018
- High7.8Linux Kernel Integer Overflow VulnerabilityKEVEPSS 14.7%Sep 25, 2018