Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

NGINX ngx_http_mp4_module vulnerability

NGINX ngx_http_mp4_module vulnerability

Use After Free in libfuse

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability

GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability

OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

net/sched: Enforce that teql can only be used as root qdisc

Arbitrary file write using cgo pkg-config directive in cmd/go

zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()

Grub2: missing unregister call for gettext command may lead to use-after-free

Linux-pam: incomplete fix for cve-2025-6020

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

Linux-pam: linux-pam directory traversal

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

Xorg: xwayland: use-after-free in syncinittrigger()

Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown

Qemu-kvm: 'qemu-img info' leads to host file read/write

Xorg-x11-server: use-after-free in procrenderaddglyphs

Xorg-x11-server: heap buffer overflow in disabledevice

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function

Xorg-x11-server: selinux context corruption

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c

Perl: write past buffer end via illegal user-defined unicode property

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

Insights-client: unsafe handling of temporary files and directories

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

Libx11: integer overflow in xcreateimage() leading to a heap overflow