All CVEs — page 714 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
This flaw allows an attacker to exploit a race condition in the Linux kernel's SUNRPC implementation, leading to potential memory corruption or privilege escalation.
NanoSVG's rasterizer has a numeric conversion flaw that can cause integer overflow when processing large SVG coordinates, leading to undefined behavior and potential process termination. This vulnerability allows attackers to trigger denial of service by crafting malicious SVG files with oversized geometry values.
The flaw is an integer overflow vulnerability in the mp3dec_skip_id3v1() function when parsing the APEv2 tag-size field, which can lead to arbitrary code execution. This matters because attackers can exploit it to execute malicious code, leading to severe system compromise.
MuJS contains a numeric conversion vulnerability in jsR_isindex() that can cause out-of-range floating-point values to be converted to integers without proper validation, leading to undefined behavior and process termination. This allows an attacker to trigger a denial of service condition by crafting specially formatted JavaScript input with excessively large numeric array indices.
SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries, which can lead to heap corruption and potential arbitrary code execution. This affects users who open PDF files with malformed PageLabels data.