Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

netfilter: flowtable: strictly check for maximum number of actions

Heap-based Buffer Overflow in Wireshark

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

Heap-based Buffer Overflow in Wireshark

Possible QML code injection in VectorImage component

xfrm: hold dev ref until after transport_finish NF_HOOK

rxrpc: Fix RxGK token loading to check bounds

Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access

Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption

Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

drm/amd/display: Do not skip unrelated mode changes in DSC validation

can: isotp: fix tx.buf use-after-free in isotp_sendmsg()

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free

net: bonding: fix use-after-free in bond_xmit_broadcast()

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…

Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

NGINX ngx_http_mp4_module vulnerability

NGINX ngx_http_mp4_module vulnerability

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability

OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain

wifi: iwlwifi: mld: cancel mlo_scan_start_wk

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

Arbitrary file write using cgo pkg-config directive in cmd/go

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys

zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()

Grub2: missing unregister call for gettext command may lead to use-after-free

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

Linux-pam: linux-pam directory traversal

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Yggdrasil: local privilege escalation in yggdrasil

Glib: integer overflow in in g_escape_uri_string()

Rhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulation

Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg

Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload

Bluez: stack overflow in name2utf8 causes dos and potential code execution

Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export