TI-2026-41777 CVE-2026-58016 · GHSA-8rpw-4xx7-27w7
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Priority MEDIUM 46
A flaw was found in GLib.
Vulnerabilities
47 records
TI-2026-28834 CVE-2026-39979
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
Priority HIGH 70
jq is a command-line JSON processor.
TI-2026-04164 CVE-2026-4775 · GHSA-cm99-m826-vgg7
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
Priority LOW 37
A flaw was found in the libtiff library.
TI-2025-12426 CVE-2025-13601 · GHSA-v6c5-9mp4-mwq4
Glib: integer overflow in in g_escape_uri_string()
Priority LOW 34
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
TI-2025-02756 CVE-2025-3155 · GHSA-h7mx-548v-cr9r
Yelp: arbitrary file read
Priority HIGH 66
A flaw was found in Yelp.
TI-2025-02434 CVE-2025-2784 · GHSA-5qxx-2mqf-3v7g
Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
Priority MEDIUM 64
A flaw was found in libsoup.
TI-2023-03511 CVE-2023-3758 · GHSA-7pwr-cfrc-px4f
Sssd: race condition during authorization leads to gpo policies functioning inconsistently
Priority LOW 35
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users.
TI-2024-01390 CVE-2024-1488 · GHSA-35qh-7f6c-rjf7
Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
Priority LOW 35
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration.
TI-2023-28739 CVE-2023-52356 · GHSA-cx8g-4cf5-cjv3
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
Priority HIGH 72
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.
TI-2023-06319 CVE-2023-6915 · GHSA-3cfm-49vw-5qrv
Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
Priority LOW 27
A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel.
TI-2023-05020 CVE-2023-5455 · GHSA-45hh-rj6v-548f
Ipa: invalid csrf protection
Priority LOW 30
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.
TI-2024-00175 CVE-2024-0193 · GHSA-52x7-wcqq-wfjp
Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
Priority HIGH 69
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel.
TI-2023-04278 CVE-2023-4641 · GHSA-6ggv-mmg2-jf4r
Shadow-utils: possible password leak during passwd(1) change
Priority LOW 26
A flaw was found in shadow-utils.
TI-2023-05184 CVE-2023-5633 · GHSA-3hmc-jxr7-rw7j
Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
Priority LOW 36
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface.
TI-2023-04522 CVE-2023-4911 · GHSA-m77w-6vjw-wh2f
Glibc: buffer overflow in ld.so leading to privilege escalation
Priority CRITICAL 93KEV
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable.
TI-2023-04360 CVE-2023-4732 · GHSA-c9mw-vpxm-p7rq
Race condition in Red Hat Enterprise Linux 8
Priority LOW 21
A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel.
TI-2023-03750 CVE-2023-4042 · GHSA-jgj3-64jr-4g3x
Ghostscript: incomplete fix for cve-2020-16305
Priority LOW 25
A flaw was found in ghostscript.
TI-2023-00173 CVE-2023-0179
Integer overflow in kernel
Priority MEDIUM 40
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel.
TI-2019-06284 CVE-2019-8720 · GHSA-5cgp-g38q-m4xj
Memory corruption in webkitgtk
Priority CRITICAL 97KEV
A vulnerability was found in WebKit.
TI-2021-02609 CVE-2021-3669 · GHSA-fr2g-fcjj-v8hc
Uncontrolled resource consumption in kernel
Priority LOW 25
A flaw was found in the Linux kernel.
TI-2021-11678 CVE-2021-31566 · GHSA-mg62-fpgc-6hjj
Link following in libarchive
Priority LOW 34
An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive.
TI-2021-05953 CVE-2021-23177 · GHSA-fq9q-7wp8-gpr7
Link following in libarchive
Priority LOW 34
An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link.
TI-2021-02872 CVE-2021-3975 · GHSA-pg89-46xq-98vv
Use after free in libvirt
Priority LOW 32
A use-after-free flaw was found in libvirt.
TI-2021-02601 CVE-2021-3659 · GHSA-578w-3cjw-832g
NULL pointer dereference in Kernel
Priority LOW 25
A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection.
TI-2021-02632 CVE-2021-3697 · GHSA-pr45-j47f-755r
Out-of-bounds write in grub2
Priority LOW 31
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap.