CVE Vulnerability Catalog

llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect(). This may lead to application crashes.

A vulnerability in the libtiff library related to handling the SamplesPerPixel tag allows an attacker to cause a denial of service (DoS). Package updates are available for Amazon Linux 2023 that fix this issue.

llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand. This may lead to application crashes.

NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash).

A vulnerability was found in the Skia component of the Chromium browser. Technical details are not provided beyond a reference to the upstream bug.

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.". This may lead to application crashes.

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType. This may lead to application crashes.

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp. This may lead to application crashes.

The vulnerability in BusyBox affects the write_status_file() function in the dpkg tool. Failure to reset a stale field cursor between package stanzas leads to out-of-bounds reads and corruption of the status file when removing multiple packages.

No detailed vulnerability description is available in the provided data. This entry refers to a Debian LTS security update (DLA).

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr). This may lead to application crashes.

No detailed vulnerability description is available in the provided data. This entry refers to a Debian LTS security update (DLA).

VideoLAN dav1d before 1.2.0 has a race condition in thread_task.c related to dav1d_decode_frame_exit that can lead to an application crash.

LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue.

A vulnerability was found in the WebRTC component of the Chromium browser. Technical details are not provided beyond a reference to the upstream bug.

A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affected versions are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. An easily exploitable vulnerability allows a low privileged attacker with network access via multiple protocols to compromise MySQL.

No detailed vulnerability description is available in the provided data. This entry refers to a Debian LTS security update (DLA).

No detailed vulnerability description is available in the provided data. This entry refers to a Debian LTS security update (DLA).

An infinite loop vulnerability in tiftoimage that results in a heap buffer overflow in convert_32s_C1P1 was found in OpenJPEG 2.1.2.

An integer overflow vulnerability was found in the tiftoimage function in OpenJPEG 2.1.2, resulting in a heap buffer overflow.