CVE-2025-29479

hiredis: Heap Buffer Overflow in Hiredis

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 4.0 Medium EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2015-0308

flash-plugin: Multiple code-execution flaws (APSB15-01)

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 7.2% KEV · Not listed

Vendors

Adobe Apple Linux and 2 more

Products

Adobe Air Adobe Air Sdk Adobe Air Sdk And Compiler and 5 more

CVE-2016-9941

libvncserver: Heap-based buffer overflow in rfbproto.c

Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message containing a subrectangle outside of the client drawing area.

CVSS 3.0 · 9.8 Critical EPSS 3.7% KEV · Not listed

Vendors

Libvncserver Project

Products

Libvncserver

CVE-2016-9942

libvncserver: Heap-based buffer overflow in ultra.c

Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message with the Ultra type tile, such that the LZO payload decompressed length exceeds what is specified by the tile dimensions.

CVSS 3.0 · 9.8 Critical EPSS 3.8% KEV · Not listed

Vendors

Libvncserver Project

Products

Libvncserver

CVE-2015-0306

flash-plugin: Multiple code-execution flaws (APSB15-01)

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.

CVSS 2.0 · 10.0 Critical EPSS 6.1% KEV · Not listed

Vendors

Adobe Apple Linux and 2 more

Products

Adobe Air Adobe Air Sdk Adobe Air Sdk And Compiler and 5 more

CVE-2015-0305

flash-plugin: Multiple code-execution flaws (APSB15-01)

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."

CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed

Vendors

Adobe Apple Linux and 2 more

Products

Adobe Air Adobe Air Sdk Adobe Air Sdk And Compiler and 5 more

CVE-2015-0304

flash-plugin: Multiple code-execution flaws (APSB15-01)

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.

CVSS 2.0 · 10.0 Critical EPSS 8.7% KEV · Not listed

Vendors

Adobe Apple Linux and 2 more

Products

Adobe Air Adobe Air Sdk Adobe Air Sdk And Compiler and 5 more

CVE-2015-0303

flash-plugin: Multiple code-execution flaws (APSB15-01)

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.

CVSS 2.0 · 10.0 Critical EPSS 5.9% KEV · Not listed

Vendors

Adobe Apple Linux and 2 more

Products

Adobe Air Adobe Air Sdk Adobe Air Sdk And Compiler and 5 more

CVE-2014-9730

Kernel: fs: udf: heap overflow in __udf_adinicb_readpage

The udf_pc_to_char function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on component lengths that are unused, which allows local users to cause a denial of service (system crash) via a crafted UDF filesystem image.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2014-9729

Kernel: fs: udf: heap overflow in __udf_adinicb_readpage

The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.18.2 does not ensure a certain data-structure size consistency, which allows local users to cause a denial of service (system crash) via a crafted UDF filesystem image.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2014-9728

Kernel: fs: udf: heap overflow in __udf_adinicb_readpage

The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2014-9705

php: heap buffer overflow in enchant_broker_request_dict()

Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.

CVSS 2.0 · 7.5 High EPSS 19.2% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Rhel Software Collections

CVE-2014-9674

freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows

The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.

CVSS 2.0 · 7.5 High EPSS 5.7% KEV · Not listed

Vendors

Canonical Fedoraproject Freetype and 3 more

Products

Ubuntu Linux Fedora Freetype and 9 more

CVE-2015-1802

libXfont: missing range check in bdfReadProperties

The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file.

CVSS 2.0 · 8.5 High EPSS 4.9% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 1 more

CVE-2015-0848

libwmf: heap overflow when decoding BMP images

Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.

CVSS 2.0 · 6.8 Medium EPSS 8.5% KEV · Not listed

Vendors

Fedoraproject Opensuse Redhat and 1 more

Products

Fedora Opensuse Enterprise Linux and 1 more

CVE-2015-8384

pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)

PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.

CVSS 2.0 · 7.5 High EPSS 3.4% KEV · Not listed

Vendors

Pcre Redhat

Products

Perl Compatible Regular Expression Library Rhel Software Collections

CVE-2015-0814

Mozilla: Miscellaneous memory safety hazards (rv:37.0) (MFSA 2015-30)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 4.6% KEV · Not listed

Vendors

Mozilla

Products

Firefox

CVE-2015-0806

Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)

The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.

CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed

Vendors

Canonical Mozilla Opensuse

Products

Ubuntu Linux Firefox Opensuse

CVE-2015-0805

Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)

The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.

CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed

Vendors

Canonical Mozilla Opensuse

Products

Ubuntu Linux Firefox Opensuse

CVE-2015-0309

flash-plugin: Multiple code-execution flaws (APSB15-01)

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.

CVSS 2.0 · 10.0 Critical EPSS 8.7% KEV · Not listed

Vendors

Adobe Apple Linux and 2 more

Products

Adobe Air Adobe Air Sdk Adobe Air Sdk And Compiler and 5 more