GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat

Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

xfrm: hold dev ref until after transport_finish NF_HOOK

Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg

Bluez: stack overflow in name2utf8 causes dos and potential code execution

Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow

Spice-server: spice: heap oob read/write via unchecked migration data offsets

Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation

Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service

Cockpit: cockpit: denial of service via unbounded connection thread spawning

Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine

Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read

Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html

Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion

Pcp: pcp: denial of service due to signed integer overflow

Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png

Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation

Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service

Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback

Apache HTTP Server: mod_xml2enc heap overflow

Apache HTTP Server: mod_proxy_html buffer overflow

Crash during DNSSEC validation of malicious content

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

Long list of incoming EDNS options degrades performance

Incorrect boundary conditions in the Audio/Video: Web Codecs component

No description published yet

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec

Information disclosure due to incorrect boundary conditions in the Audio/Video component

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Use-after-free in the JavaScript Engine component

Information disclosure due to uninitialized memory in the Graphics: Canvas2D component

Use-after-free in the WebRTC component

Use-after-free in the DOM: Core & HTML component

Pillow is vulnerable to a FITS GZIP decompression bomb