Vulnerabilities (CVE)

Filtered by CWE-562
Angry Yack Logo
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-4418 2026-02-25 N/A 6.2 MEDIUM
A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOEventFD callback while the data pointer's stack frame was concurrently being "freed" when returning from virNetClientIOEventLoop(). The 'virtproxyd' daemon can be used to trigger requests. If libvirt is configured with fine-grained access con ...

Show More

CVE-2024-33045 1 Qualcomm 360 Ar8035, Ar8035 Firmware, Csra6620 and 357 more 2025-08-11 N/A 8.4 HIGH
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
CVE-2022-41837 2 Debian, Openimageio 2 Debian Linux, Openimageio 2024-11-21 N/A 9.8 CRITICAL
An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2021-21798 1 Gonitro 1 Nitro Pro 2024-11-21 6.8 MEDIUM 7.8 HIGH
An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a stack variable to go out of scope, resulting in the application dereferencing a stale pointer. This can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger the vulnerability.
CVE-2020-21686 1 Nasm 1 Netwide Assembler 2024-11-21 N/A 5.5 MEDIUM
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.