Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunksEPSS 0.4%Jan 26, 2024
- Critical9.8There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35.EPSS 3.2%Aug 22, 2023
- High8.8A flaw was found in libXpm.EPSS 1.2%Feb 7, 2023
- High7.5A flaw was found in libXpm.Feb 7, 2023
- Medium5.5GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump.EPSS 1.5%Jan 30, 2023
- Medium5.5processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.EPSS 0.4%Jan 23, 2023
- High7.8A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or othJan 20, 2023
- High7.8A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or otEPSS 0.4%Jan 20, 2023
- High7.8Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallbackEPSS 0.4%Jan 5, 2023
- Low3.3lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to oEPSS 0.7%Jan 1, 2023
- Critical9.8Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.EPSS 1.6%Dec 20, 2022
11 records · page 1 of 1
PreviousNext