Browse CVEs

MEDIUM 5.9 CVE-2025-64098 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.… Debian Linux 2.6.11 / 3.3.1+ Fix from $1,6002026-02-03 HIGH 7.5 CVE-2025-62600 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14… Debian Linux 2.6.11 / 3.3.1+ Fix from $1,9502026-02-03 HIGH 7.5 CVE-2025-62599 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14… Debian Linux 2.6.11 / 3.3.1+ Fix from $1,9502026-02-03 HIGH 7.3 CVE-2025-62231 A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause a… Debian Linux 21.1.19+ Fix from $1,9502025-10-30 HIGH 7.8 CVE-2024-52035 An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed… Debian Linux No fix yet Fix from $1,9502025-06-02 HIGH 7.8 CVE-2024-40635 containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched w… Debian Linux 1.6.38 / 1.7.27+ Fix from $1,9502025-03-17 CRITICAL 9.8 CVE-2025-0838 There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,ma… Debian Linux 20250127.0+ Fix from $2,3002025-02-21 CRITICAL 9.8 CVE-2024-47606 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_the… Debian Linux 1.24.10+ Fix from $2,3002024-12-12 HIGH 7.8 CVE-2024-46953 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for th… Debian Linux 10.04.0+ Fix from $1,9502024-11-10 HIGH 7.8 CVE-2024-42136 In the Linux kernel, the following vulnerability has been resolved: cdrom: rearrange last_media_change check to avoid unintentional overflow When r… Debian Linux 6.1.98 / 6.6.39+ Fix from $1,9502024-07-30 HIGH 7.8 CVE-2024-41000 In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly r… Debian Linux 5.10.221 / 5.15.162+ Fix from $1,9502024-07-12 CRITICAL 9.1 CVE-2024-5197 There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter… Debian Linux 1.14.1+ Fix from $2,3002024-06-03 HIGH 7.8 CVE-2024-4453 GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… Debian Linux Patch available Fix from $1,9502024-05-22 MEDIUM 6.8 CVE-2024-24857 A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity … Debian Linux 6.7.12+ Fix from $1,6002024-02-05 CRITICAL 9.8 CVE-2023-51714 An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2… Debian Linux 5.15.17 / 6.2.11+ Fix from $2,3002023-12-24 CRITICAL 9.8 CVE-2023-40186 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer… Debian Linux 2.11.0+ Fix from $2,3002023-08-31 HIGH 7.5 CVE-2023-38403 iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. Debian Linux 3.14 / 13.6.1+ Fix from $1,9502023-07-17 HIGH 7.5 CVE-2023-32307 Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.… Debian Linux 1.13.15+ Fix from $1,9502023-05-26 CRITICAL 9.8 CVE-2022-47629 Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. Debian Linux 1.6.3+ Fix from $2,3002022-12-20 CRITICAL 9.8 CVE-2022-23484 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 HIGH 7.8 CVE-2022-41325 An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playl… Debian Linux after 3.0.17.4 Fix from $1,9502022-12-06 HIGH 8.8 CVE-2022-44638 In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflo… Debian Linux 0.42.2+ Fix from $1,9502022-11-03 CRITICAL 9.8 CVE-2022-37454EPSS 5% The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute … Debian Linux 1.0.5 / 3.7.16+ Fix from $2,3002022-10-21 HIGH 7.8 CVE-2022-38784 Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Process… Debian Linux after 22.08.0 Fix from $1,9502022-08-30 HIGH 7.8 CVE-2022-1924 DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which… Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1925 DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_… Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-2122 DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a se… Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1920 Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. … Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1921 Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary … Debian Linux 1.20.3+ Fix from $1,9502022-07-19 HIGH 7.8 CVE-2022-1922 DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data fu… Debian Linux 1.20.3+ Fix from $1,9502022-07-19