Browse CVEs

HIGH 7.5 CVE-2025-25475 A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafte… Debian Linux Patch available Fix from $1,9502025-02-18 MEDIUM 6.5 CVE-2025-22921 FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c. Debian Linux Mitigation only Fix from $1,6002025-02-18 MEDIUM 5.9 CVE-2024-33600 nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the… Debian Linux 2.40+ Fix from $1,6002024-05-06 HIGH 8.8 CVE-2022-24810 net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can us… Debian Linux 5.9.2+ Fix from $1,9502024-04-16 MEDIUM 5.7 CVE-2023-4875 Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12 Debian Linux 2.2.12+ Fix from $1,6002023-09-09 MEDIUM 6.5 CVE-2023-4874 Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 Debian Linux 2.2.12+ Fix from $1,6002023-09-09 HIGH 7.5 CVE-2023-41909 An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes,… Debian Linux after 9.0 Fix from $1,9502023-09-05 HIGH 7.5 CVE-2023-39351 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to… Debian Linux 2.11.0+ Fix from $1,9502023-08-31 HIGH 7.5 CVE-2023-41358 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero. Debian Linux after 9.0 Fix from $1,9502023-08-29 MEDIUM 6.5 CVE-2023-28484 In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in x… Debian Linux 2.10.4+ Fix from $1,6002023-04-24 MEDIUM 6.5 CVE-2023-24751 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to … Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24752 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulne… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24754 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vuln… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24755 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulner… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24756 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulner… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24757 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vul… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-24758 libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vuln… Debian Linux Patch available Fix from $1,6002023-03-01 MEDIUM 5.3 CVE-2022-3341 A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because th… Debian Linux 5.0.3+ Fix from $1,6002023-01-12 HIGH 7.5 CVE-2022-41999 A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A sp… Debian Linux No fix yet Fix from $1,9502022-12-22 MEDIUM 5.9 CVE-2022-43593 A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted Ima… Debian Linux No fix yet Fix from $1,6002022-12-22 MEDIUM 5.9 CVE-2022-43594 Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially cra… Debian Linux No fix yet Fix from $1,6002022-12-22 MEDIUM 5.9 CVE-2022-43595 Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially cra… Debian Linux No fix yet Fix from $1,6002022-12-22 MEDIUM 5.9 CVE-2022-43603 A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted I… Debian Linux No fix yet Fix from $1,6002022-12-22 HIGH 7.5 CVE-2022-3109 An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cau… Debian Linux 5.0.3+ Fix from $1,9502022-12-16 CRITICAL 9.8 CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the functio… Debian Linux 3.6.2 / 8.2.12+ Fix from $2,3002022-11-22 MEDIUM 6.5 CVE-2022-44792EPSS 52% handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote… Debian Linux after 5.9.3 Fix from $1,6002022-11-07 MEDIUM 6.5 CVE-2022-44793EPSS 53% handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a … Debian Linux after 5.9.3 Fix from $1,6002022-11-07 MEDIUM 6.5 CVE-2022-2928 In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increa… Debian Linux after 4.4.3 Fix from $1,6002022-10-07 HIGH 7.5 CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It lead… Debian Linux No fix yet Fix from $1,9502022-09-12 MEDIUM 6.5 CVE-2021-46837 res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows a… Debian Linux 16.16.2 / 17.9.3+ Fix from $1,6002022-08-30