Fedora Project Fedora 35

In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.

A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.

Heap-based Buffer Overflow in vim/vim

kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.

Buffer Over-read in function find_next_quote in vim/vim

Heap-based Buffer Overflow in vim/vim

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in vim/vim

Buffer Over-read in vim/vim

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Heap-based Buffer Overflow in vim/vim

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Use After Free in vim/vim

Out-of-bounds Read in vim/vim

Use After Free in vim/vim

Heap-based Buffer Overflow in vim/vim

Out-of-bounds Write in vim/vim

Out-of-bounds Read in vim/vim

Buffer Over-read in vim/vim

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in vim/vim

Out-of-bounds Write in vim/vim

Out-of-bounds Read in vim/vim

Heap-based Buffer Overflow in vim/vim

Stack-based Buffer Overflow in vim/vim

Injection in fish

Use After Free in vim/vim

Use after free in utf_ptr2char in vim/vim

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon DCodeNumber parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Heap-based Buffer Overflow in vim/vim

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.

Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

Out-of-bounds Write in vim/vim

PHP-FPM memory access in root process leading to privilege escalation

Out-of-bounds Write in vim/vim

Integer Overflow or Wraparound in vim/vim

Out-of-bounds Read in vim/vim

Heap-based Buffer Overflow in vim/vim

Out-of-bounds Write in vim/vim