Open Source Vulnerabilities

irssi

issue was discovered in Irssi before 1

librewolf, librewolf, librewolf, librewolf, librewolf

When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content

wpa_supplicant

implementation of PEAP in wpa_supplicant through 2

graphicsmagick

GraphicsMagick 1

libgit2

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application

openjpeg

In OpenJPEG 2

irssi

issue was discovered in Irssi before 1

graphicsmagick

ReadSUNImage function in coders/sun

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL protocol

unleash-proxy

unleash-proxy

openjpeg

flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function

irssi

In Irssi before 1

graphicsmagick

ReadWMFImage function in coders/wmf

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash

openjpeg

flaw was found in OpenJPEG’s encoder

irssi

In Irssi before 1

graphicsmagick

ReadMNGImage function in coders/png

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed

openjpeg

heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files

graphicsmagick

WriteOnePNGImage function in coders/png

irssi

Irssi 1

traccar

traccar

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations

libosip2

GNU oSIP v5

traccar

traccar

graphicsmagick

GraphicsMagick 1

qt5-qtwebengine, openjpeg

flaw was found in openjpeg's src/lib/openjp2/t2

irssi

Irssi before 1

mruby

mruby through 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell

graphicsmagick

GraphicsMagick 1

openjpeg

Integer Overflow in OpenJPEG v2

irssi

Irssi 1

mruby

Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode

graphicsmagick

GraphicsMagick 1

openjpeg

flaw was found in the opj2_decompress program in openjpeg2 2

mruby

NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash

graphicsmagick

GraphicsMagick 1

openjpeg

heap-based buffer overflow was found in openjpeg in color

mruby

use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3

inspircd

InspIRCd 3

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode

graphicsmagick

ReadSUNImage function in coders/sun

mruby

User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Certain network request objects were freed too early when releasing a network request handle