Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service

Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retries

Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error paths

Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching

Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation

Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers

Krb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failure

Krb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error path

Krb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failure

Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decoding

Krb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requests

Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanup

Gst-plugins-good: gst-plugins-good: qtdemux out-of-bounds heap read from invalid uncompressed video layout

Gst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of service

Ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rce

Gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loop

Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice index

Gstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned underflow

Gst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handling

Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation

Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)

Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail

Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length

Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail

Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length

Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator

Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service

Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure

Hivex: hivex: denial of service via out-of-bounds read in big-data block processing