Open Source Vulnerabilities

libgit2

git_commit_message function in oid

dbus

issue was discovered in D-Bus before 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash

dbus

issue was discovered in D-Bus before 1

libgit2

http_connect function in transports/http

openjpeg

infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2

libgit2

Git Smart Protocol support in libgit2 before 0

openjpeg

integer overflow vulnerability was found in tiftoimage function in openjpeg 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL

graphicsmagick

TIFFGetField function in coders/tiff

libgit2

Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt

graphicsmagick

Utah RLE reader in GraphicsMagick before 1

openjpeg

bmp_read_info_header function in bin/jp2/convertbmp

polkit

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Security fix for CVE-2022-22764 applied in: thunderbird 91.6.0-r0, librewolf 97.0-r0

irssi

issue was discovered in Irssi before 1

graphicsmagick

Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1

libgit2

flaw was found in libgit2 before version 0

openjpeg

size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k

polkit

local privilege escalation vulnerability was found on polkit's pkexec utility

librewolf, librewolf, librewolf, librewolf, librewolf

Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed underneath it

irssi

issue was discovered in Irssi before 1

graphicsmagick

ReadMNGImage function in coders/png

libgit2

flaw was found in libgit2 before version 0

openjpeg

mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Web-accessible extension pages (pages with a moz-extension:// scheme) were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy

irssi

issue was discovered in Irssi before 1

openjpeg

off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd

wpa_supplicant

issue was discovered in rsn_supp/wpa

libgit2

In ng_pkt in transports/smart_pkt

graphicsmagick

When GraphicsMagick 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When importing resources using Web Workers, error messages would distinguish the difference between <code>application/javascript</code> responses and non-script responses

irssi

issue was discovered in Irssi before 1

openjpeg

stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert

graphicsmagick

When GraphicsMagick 1

wpa_supplicant

implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd...

libgit2

issue was found in Git before v2

irssi

issue was discovered in Irssi before 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's document that e

openjpeg

invalid write access was discovered in bin/jp2/convert

graphicsmagick

When GraphicsMagick 1

libgit2

remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

wpa_supplicant

implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit

librewolf, librewolf, librewolf, librewolf, librewolf

When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number

irssi

In Irssi before 1

openjpeg

heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2

libgit2

issue was found in Git before v2

graphicsmagick

QuantumTransferMode function in coders/tiff

wpa_supplicant

implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit

librewolf, librewolf, librewolf, librewolf, librewolf

Remote Agent, used in WebDriver, did not validate the Host or Origin headers