Open Source Vulnerabilities

sox

read_samples function in hcom

miniupnpd

Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2

hostapd

invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash

libmodbus

heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus

sox

Security fix for CVE-2017-13571 applied in: sox 14.4.2-r5

miniupnpd

AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2

wpa_supplicant, hostapd

EAP-pwd implementation in hostapd (EAP server) before 2

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free

miniupnpd

Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2

sox

In SoX 14

webkit2gtk

WebKitGTK and WPE WebKit prior to version 2

wpa_supplicant, hostapd

hostapd before 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free

miniupnpd

Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2

sox

In SoX 14

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

minidlna, hostapd

Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualifie...

miniupnpd

upnp_event_prepare function in upnpevents

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74

sox

heap-based buffer overflow vulnerability exists in the sphere

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

opensmtpd-extras

OpenSMTPD before 6

libao

_tokenize_matrix function in audio_out

sox

flaw was found in sox 14

wpa_supplicant, hostapd

In wpa_supplicant and hostapd 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

sox

floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav

librewolf, librewolf, librewolf, librewolf, librewolf

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open

webkit2gtk

logic issue was addressed with improved validation

hostapd

implementations of EAP-pwd in hostapd before 2

sox

vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i

librewolf, librewolf, librewolf, librewolf, librewolf

malicious extension could have called <code>browser

webkit2gtk

memory corruption issue was addressed with improved memory handling

hostapd

implementations of SAE in hostapd before 2

webkit2gtk

memory corruption issue was addressed with improved memory handling

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>

sdl2_ttf

SDL_ttf v2

libpcap

sf-pcapng

awstats

Awstats version 7

webkit2gtk

memory corruption issue was addressed with improved state management

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero

libpcap

rpcapd/daemon

awstats

In AWStats through 7

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 75

libpcap

rpcapd/daemon