Open Source Vulnerabilities

librewolf, librewolf, librewolf, librewolf, librewolf

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient autho...

wabt

wasm-interp v1

podofo

PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

prosody

issue was discovered in Prosody before 0

webkit2gtk

logic issue was addressed with improved restrictions

libde265

Libde265 v1

podofo

PoDoFo::PdfPainter::ExpandTabs function in PdfPainter

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type

otrs

jQuery before 3

webkit2gtk

memory corruption issue was addressed with improved validation

libde265

Libde265 v1

podofo

PoDoFo::PdfXObject::PdfXObject function in PdfXObject

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

webkit2gtk

use after free issue was addressed with improved memory management

libde265

Libde265 v1

podofo

PoDoFo::PdfVariant::DelayedLoad function in PdfVariant

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

librewolf, librewolf, librewolf, librewolf, librewolf

lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to

webkit2gtk

type confusion issue was addressed with improved state handling

libde265

Libde265 v1

podofo

issue was discovered in PoDoFo 0

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers

libde265

Libde265 v1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

podofo

issue was discovered in PoDoFo 0

otrs

issue was discovered in Open Ticket Request System (OTRS) 5

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Uninitialized Use in V8 in Google Chrome prior to 87

webkit2gtk

This issue was addressed with improved checks

libde265

Libde265 v1

podofo

issue was discovered in crop_page in PoDoFo 0

otrs

Open Ticket Request System (OTRS) 4

webkit2gtk

use after free issue was addressed with improved memory management

libde265

Libde265 v1

podofo

NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 84

otrs

Open Ticket Request System (OTRS) 4

sofia-sip

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libde265

Libde265 v1

podofo

PoDoFo 0

otrs

CKEditor 4

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78

sofia-sip

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

webkit2gtk

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins

libde265

Libde265 v1

podofo

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator

otrs

In Open Ticket Request System (OTRS) 4