Total 819 security vulnerabilities recorded for debian software and firmware.
An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gec...
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an att...
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable ...
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow ...
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This ...
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox E...
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerabi...
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affe...
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading...
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. Th...
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a poten...
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. ...
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially explo...
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation contr...
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thu...
Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is manag...
Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potentia...
Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted use...
Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefo...
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This ...
A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. Th...
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable...
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort t...
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from m...