Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha().EPSS 0.2%Jun 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against…EPSS 0.2%May 19, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on roundup_pow_of_two() to…EPSS 0.3%Apr 17, 2024
- Medium6.8A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function.EPSS 0.3%Feb 5, 2024
- High7.8Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.EPSS 0.6%Jan 25, 2024
- High7.8Qualcomm Multiple Chipsets Integer Overflow VulnerabilityKEVEPSS 0.7%Dec 4, 2023
- Critical9.6Google Skia Integer Overflow VulnerabilityKEVEPSS 16.5%Nov 29, 2023
- Critical9.8MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field.EPSS 3.4%Oct 14, 2023
- Low3.3Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay.EPSS 0.4%Aug 22, 2023
- High7.8Apple Multiple Products Integer Overflow VulnerabilityKEVEPSS 51.5%Jun 23, 2023
- Critical9.6Google Chrome Skia Integer Overflow VulnerabilityKEVEPSS 5.7%Apr 18, 2023
- High7.8Microsoft Windows Graphic Component Privilege Escalation VulnerabilityKEVEPSS 5.6%Feb 14, 2023
- High7.8In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.EPSS 0.3%Jan 13, 2023
- High8.8PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS…EPSS 6.5%Dec 25, 2022
- High7.5An issue was discovered in libxml2 before 2.10.3.EPSS 41.4%Nov 23, 2022
- Critical9.8The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or…EPSS 5.8%Oct 21, 2022
- Medium6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.EPSS 3.8%May 3, 2022
- Critical9.8In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.EPSS 4.8%Feb 18, 2022
- High7.5In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.EPSS 4.8%Feb 18, 2022
- High8.4Linux Kernel Heap-Based Buffer Overflow VulnerabilityKEVEPSS 25.2%Feb 11, 2022
- High7.5Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.EPSS 4.7%Jan 26, 2022
- Critical9.8Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.EPSS 5.1%Jan 24, 2022
- High8.8storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 3.0%Jan 10, 2022
- High8.8nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 3.0%Jan 10, 2022
- High8.8lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 2.8%Jan 10, 2022