Open Source Vulnerabilities

otrs

jQuery before 3

webkit2gtk

memory corruption issue was addressed with improved validation

libde265

Libde265 v1

podofo

PoDoFo::PdfXObject::PdfXObject function in PdfXObject

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

webkit2gtk

use after free issue was addressed with improved memory management

libde265

Libde265 v1

podofo

PoDoFo::PdfVariant::DelayedLoad function in PdfVariant

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

librewolf, librewolf, librewolf, librewolf, librewolf

lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to

webkit2gtk

type confusion issue was addressed with improved state handling

libde265

Libde265 v1

podofo

issue was discovered in PoDoFo 0

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers

libde265

Libde265 v1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

podofo

issue was discovered in PoDoFo 0

otrs

issue was discovered in Open Ticket Request System (OTRS) 5

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Uninitialized Use in V8 in Google Chrome prior to 87

webkit2gtk

This issue was addressed with improved checks

libde265

Libde265 v1

podofo

issue was discovered in crop_page in PoDoFo 0

otrs

Open Ticket Request System (OTRS) 4

webkit2gtk

use after free issue was addressed with improved memory management

libde265

Libde265 v1

podofo

NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 84

otrs

Open Ticket Request System (OTRS) 4

sofia-sip

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libde265

Libde265 v1

podofo

PoDoFo 0

otrs

CKEditor 4

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78

sofia-sip

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

webkit2gtk

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins

libde265

Libde265 v1

podofo

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator

otrs

In Open Ticket Request System (OTRS) 4

librewolf, librewolf, librewolf, librewolf, librewolf

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission

sofia-sip

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libde265

Libde265 v1

otrs

In Open Ticket Request System (OTRS) 4

librewolf, librewolf, librewolf, librewolf, librewolf

Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash

webkit2gtk

logic issue was addressed with improved restrictions

sofia-sip

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification

libde265

Libde265 v1