OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Xorg-x11-server: use-after-free in procrenderaddglyphs

Unixodbc: out of bounds stack write due to pointer-to-integer types conversion

Xorg-x11-server: heap buffer overflow in disabledevice

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function

Xorg-x11-server: selinux context corruption

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

Insights-client: unsafe handling of temporary files and directories

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

Libx11: integer overflow in xcreateimage() leading to a heap overflow

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

Kernel: netlink socket crash (null pointer deref) in netlink_dump function

Heap-buffer-overflow in src/formats_i.c

Heap-buffer-overflow in src/hcom.c

Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack

Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg

Bluez: stack overflow in name2utf8 causes dos and potential code execution

Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow

Spice-server: spice: heap oob read/write via unchecked migration data offsets

Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation

Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service

Cockpit: cockpit: denial of service via unbounded connection thread spawning

Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine

Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read

Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html

Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion

Pcp: pcp: denial of service due to signed integer overflow

Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png

Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation

Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service

Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback

Apache HTTP Server: mod_xml2enc heap overflow

Apache HTTP Server: mod_proxy_html buffer overflow

Crash during DNSSEC validation of malicious content

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

Long list of incoming EDNS options degrades performance