Skip to content
Threat Feed
Subscribe

Tag

Memory-Safety

6 briefs RSS
high advisory

Heap Out-of-Bounds Read in FreeRDP Glyph Caching

FreeRDP versions 3.28.0 and earlier are vulnerable to a heap out-of-bounds read during the processing of malicious RDP server glyph fragments, allowing for potential client-side crashes or information disclosure.

FreeRDP vulnerability memory-safety remote-access tls man-in-the-middle
1t 1c
high advisory

Open Babel Uninitialized Pointer Dereference Vulnerability (CVE-2022-42885)

A high-severity memory-safety vulnerability (CVE-2022-42885) in Open Babel's GRO residue parser allows an uninitialized pointer dereference when processing a specially crafted GRO input file, potentially leading to application crash or arbitrary code execution.

Open Babel <= 3.1.1 +1 vulnerability memory-safety cve open-babel
1t 1c
high threat

Open Babel MOL2 Parser Out-of-Bounds Write (CVE-2022-43607)

A memory-safety vulnerability, CVE-2022-43607, in Open Babel's MOL2 parser allows an out-of-bounds write when processing a crafted input file, potentially leading to denial of service or arbitrary code execution.

exploited Open Babel +1 memory-safety vulnerability library cve file-parsing chemistry denial-of-service code-execution
1r 1t 1c
high advisory

Open Babel Has Uninitialized Pointer Dereference in MSI Atom Parser

A memory-safety vulnerability (CVE-2022-44451) in Open Babel's MSI parser allows for an uninitialized pointer dereference when processing a specially crafted MSI input file, affecting versions prior to 3.2.0 and potentially leading to application instability or denial of service when a victim opens a malicious file.

Open Babel chemistry vulnerability memory-safety open-babel cve
1t 1c
high threat

barebox EFI PE Loader Memory-Safety Vulnerabilities (CVE-2026-34963)

barebox versions prior to 2026.04.0 are vulnerable to memory-safety issues in the EFI PE loader (CVE-2026-34963), potentially allowing code execution via malicious EFI PE binaries.

barebox memory-safety heap-overflow bootloader
1r 1t 1c
high advisory

Swift Crypto X-Wing HPKE Decapsulation Vulnerability

The X-Wing decapsulation path in swift-crypto accepts attacker-controlled encapsulated ciphertext bytes without enforcing the required fixed ciphertext length of 1120 bytes, leading to a potential out-of-bounds read.

vulnerability memory-safety swift-crypto
2r 1t