CWE-475.

HPE NonStop TSQLFIL - Memory corruption vulnerability

• Hewlett Packard Enterprise HPE NonStop TSQLFIL
• CWE-475

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

• CWE-475
• CWE-754

>=4.2.0.Final, <4.2.17.Final || <4.1.137.Final · fixed in 4.2.17.Final, 4.1.137.Final

Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin

• AWS OpenSearch
• Github OpenSearch
• CWE-475

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-475

Other issue in the JavaScript Engine component

• Mozilla Firefox
• Mozilla Thunderbird
• Cross-site scripting (XSS)
• Memory corruption

OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)

• AcademySoftwareFoundation openexr
• Memory corruption
• CWE-475

iccDEV has Type Confusion in CIccTagXmlTagData::ToXml()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-20

rtvm-interpreter lacks sufficient checks in public API

• CWE-475

<=4.0.0 · no fixed version yet

Trend Micro, Inc. Trend Micro Apex Central: An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below…

• Trend Micro, Inc. Trend Micro Apex Central
• CWE-475

Trend Micro, Inc. Trend Micro Apex Central: A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version…

• Trend Micro, Inc. Trend Micro Apex Central
• CWE-475

Open WebUI Allows Viewing of Admin Details

• Broken access control
• CWE-475

<=0.3.8 · no fixed version yet

Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb

• CWE-475

>=4.0.0, <=5.0.0b2 · no fixed version yet

Undefined Behavior in mlflow

• CWE-475

<2.11.3 · fixed in 2.11.3

ClamAV HTML Parser Denial of Service Vulnerability

• Cisco ClamAV
• CWE-475

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.

• Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000
• CWE-475

Undefined Behavior for Input to API in Mutt

• Mutt
• CWE-475

Undefined Behavior for Input to API in Mutt

• Mutt
• CWE-475

distribution catalog API endpoint can lead to OOM via malicious user input

• Denial of service
• CWE-475

<2.8.2-beta.1 · fixed in 2.8.2-beta.1

Undefined behavior when users supply invalid resource handles

• CWE-20
• CWE-475

<2.6.4 || >=2.7.0, <2.7.2 || >=2.8.0, <2.8.1 · fixed in 2.6.4, 2.7.2, 2.8.1

Denial of Service when processing malformed Role names

• MongoDB Inc. MongoDB Server
• CWE-475