All CVEs — page 267 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A heap buffer overflow in NTFS-3G's ntfscat utility allows attackers to corrupt heap memory when reading files from malicious NTFS images, potentially leading to arbitrary code execution or data corruption.
The vulnerability is a use-after-free and double free in llama.cpp's chat parser that allows remote attackers to corrupt heap memory by submitting crafted tool-id tags after tool-close tags, potentially leading to arbitrary code execution or denial of service.
Telegram Desktop before 7.2.9 has an IPC record-separator injection vulnerability that allows attackers to inject OPEN: records via unescaped semicolons in tg:// links, enabling remote file upload and account takeover.