Browse CVEs

HIGH 7.8 CVE-2022-29886 An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer … Alyac No fix yet Fix from $1,9502022-08-05 HIGH 7.8 CVE-2022-32543 An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer … Alyac No fix yet Fix from $1,9502022-08-05 CRITICAL 9.8 CVE-2022-33719 Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. Android Mitigation only Fix from $2,3002022-08-05 MEDIUM 5.5 CVE-2022-34612 Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause… Rizin after 0.4.0 Fix from $1,6002022-07-27 MEDIUM 5.5 CVE-2021-33439 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in … Mjs 2.20.0+ Fix from $1,6002022-07-26 HIGH 7.8 CVE-2021-46829 GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated … Fedora 2.42.8+ Fix from $1,9502022-07-24 HIGH 7.8 CVE-2022-1924 DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which… Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1925 DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_… Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-2122 DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a se… Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1920 Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. … Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1921 Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary … Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1922 DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data fu… Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1923 DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function whi… Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-2454 Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV. Gpac after 2.0.0 Fix from $1,9502022-07-19 CRITICAL 9.8 CVE-2022-32073 WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR. Wolfssh Patch available Fix from $2,3002022-07-13 HIGH 8.2 CVE-2022-31600 NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerabi… Dgx A100 Firmware 22.5.5+ Fix from $1,9502022-07-04 HIGH 7.8 CVE-2022-2285 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. Fedora 9.0.0018+ Fix from $1,9502022-07-02 MEDIUM 5.5 CVE-2022-33068 An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified v… Fedora Patch available Fix from $1,6002022-06-23 HIGH 7.8 CVE-2022-32545 A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted … Fedora 6.9.12-43 / 7.1.0-28+ Fix from $1,9502022-06-16 HIGH 7.8 CVE-2022-32546 A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted … Fedora 6.9.12-44 / 7.1.0-29+ Fix from $1,9502022-06-16 MEDIUM 6.7 CVE-2022-20178 In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to … Android Mitigation only Fix from $1,6002022-06-15 CRITICAL 9.8 CVE-2022-25651 Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdra… Apq8009 Firmware Mitigation only Fix from $2,3002022-06-14 MEDIUM 5.3 CVE-2022-28614 The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very larg… HTTP Server after 2.4.53 Fix from $1,6002022-06-09 CRITICAL 9.1 CVE-2022-28615EPSS 6% Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extrem… HTTP Server 2.4.54+ Fix from $2,3002022-06-09 HIGH 7.5 CVE-2022-31005 Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vu… Vapor 4.60.3+ Fix from $1,9502022-05-31 CRITICAL 9.8 CVE-2022-26775 An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An a… Mac Os X 10.15.7 / 12.4+ Fix from $2,3002022-05-26 CRITICAL 9.8 CVE-2022-26711 An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iP… Itunes 8.6 / 12.4+ Fix from $2,3002022-05-26 MEDIUM 5.5 CVE-2022-29358 epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in _parse_special_tag at sxmlc.c. This vulnerability allows attack… Epub2txt2 No fix yet Fix from $1,6002022-05-25 HIGH 7.5 CVE-2022-29219 Lodestar is a TypeScript implementation of the Ethereum Consensus specification. Prior to version 0.36.0, there is a possible consensus split given m… Lodestar 0.36.0+ Fix from $1,9502022-05-24 HIGH 7.5 CVE-2022-31264 Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Rbpf 0.2.29+ Fix from $1,9502022-05-21