Open Source Vulnerabilities

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Uninitialized Use in V8 in Google Chrome prior to 87

webkit2gtk

This issue was addressed with improved checks

libde265

Libde265 v1

podofo

issue was discovered in crop_page in PoDoFo 0

otrs

Open Ticket Request System (OTRS) 4

webkit2gtk

use after free issue was addressed with improved memory management

libde265

Libde265 v1

podofo

NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 84

otrs

Open Ticket Request System (OTRS) 4

sofia-sip

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libde265

Libde265 v1

podofo

PoDoFo 0

otrs

CKEditor 4

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78

sofia-sip

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

webkit2gtk

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins

libde265

Libde265 v1

podofo

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator

otrs

In Open Ticket Request System (OTRS) 4

librewolf, librewolf, librewolf, librewolf, librewolf

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission

sofia-sip

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libde265

Libde265 v1

otrs

In Open Ticket Request System (OTRS) 4

librewolf, librewolf, librewolf, librewolf, librewolf

Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash

webkit2gtk

logic issue was addressed with improved restrictions

sofia-sip

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification

libde265

Libde265 v1

otrs

issue was discovered in Open Ticket Request System (OTRS) 6

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine

webkit2gtk

logic issue was addressed with improved state management

libde265

Libde265 v1

otrs

Open Ticket Request System (OTRS) 4

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash

webkit2gtk

memory corruption issue was addressed with improved state management

libde265

Libde265 v1

otrs

In OTRS 6

librewolf, librewolf, librewolf, librewolf, librewolf

XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar

webkit2gtk

integer overflow was addressed with improved input validation

libde265

Libde265 v1

otrs

In Open Ticket Request System (OTRS) through 3

librewolf, librewolf, librewolf, librewolf, librewolf

browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information

webkit2gtk

use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2

libosinfo

libosinfo 1

screen

buffer overflow was found in the way GNU Screen before 4

libde265

libde265 v1

otrs

Code injection exists in Kernel/System/Spelling

librewolf, librewolf, librewolf, librewolf, librewolf

Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox