Open Source Vulnerabilities

strongswan

In stroke_socket

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100

doas

In OpenDoas from 6

libexif

exif_entry_get_value function in exif-entry

wireshark

In Wireshark 2

graphicsmagick

AcquireCacheNexus function in magick/pixel_cache

strongswan

In verify_emsa_pkcs1_signature() in gmp_rsa_public_key

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers Andrew McCreight, Nicolas B

libvorbis

bark_noise_hybridmp function in psy

wireshark

In Wireshark 2

libexif

libexif through 0

graphicsmagick

In GraphicsMagick 1

strongswan

In verify_emsa_pkcs1_signature() in gmp_rsa_public_key

librewolf, librewolf, librewolf, librewolf, librewolf

If array shift operations are not used, the Garbage Collector may have become confused about valid objects

libvorbis

In Xiph

opusfile

null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile

wireshark

In Wireshark 2

libexif

vulnerability was found in libexif

strongswan

gmp plugin in strongSwan before 5

graphicsmagick

In GraphicsMagick 1

libvorbis

Xiph

thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy

libexif

exif_entry_get_value in exif-entry

wireshark

In Wireshark 2

strongswan

in-memory certificate cache in strongSwan before 5

graphicsmagick

Multiple buffer overflows in GraphicsMagick 1

icecast

buffer overflow was discovered in the URL-authentication backend of the Icecast before 2

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers

libvorbis

out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest

libexif

In libexif, there is a possible out of bounds write due to an integer overflow

wireshark

In Wireshark 2

libressl, libgcrypt

Libgcrypt before 1

strongswan

gmp plugin in strongSwan before 5

graphicsmagick

In GraphicsMagick before 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between invalid key handles and cross-origin key handles

libexif

In exif_data_save_data_entry of exif-data

libvorbis

mapping0_forward in mapping0

wireshark

In Wireshark 2

libgcrypt

In Libgcrypt 1

strongswan

In strongSwan before 5

graphicsmagick

coders/xwd

confuse

trim_whitespace in lexer

libexif

issue was discovered in libexif before 0

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption

libvorbis

bark_noise_hybridmp in psy

wireshark

In Wireshark 2

graphicsmagick

coders/xwd

strongswan

strongSwan before 5

libgcrypt

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library

libexif

issue was discovered in libexif before 0