Search vulnerabilities

Results 2

Export CSV
CVE-2024-2961

glibc: Out of bounds write in iconv may lead to remote code execution

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

CVSS 3.1 · 7.3 High EPSS 88.3% KEV · Not listed
Vendors
Debian Gnu Netapp and 1 more
CVE-2025-0725

gzip integer overflow

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

CVSS 3.1 · 7.3 High EPSS 1.8% KEV · Not listed
Vendors