All CVEs — page 265 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
libexpat contains a heap buffer over-read vulnerability that allows attackers to read adjacent heap memory, potentially exposing pointers and function addresses that can defeat ASLR and enable further exploitation. This occurs when XML_ParseBuffer advances the parse buffer end without validating against allocated buffer size, leading to out-of-bounds reads.
A heap buffer overflow in NTFS-3G allows attackers to corrupt heap memory when processing specially crafted NTFS images, potentially leading to privilege escalation since ntfs-3g runs with SUID root permissions.
The flaw allows an attacker to inject arbitrary OS commands via the listen configuration field, leading to potential full system compromise.