2040-bit certificate signing causes a heap buffer overflow in luci-lib-px5g
Published
Medium
Security research archive
Advisory Index
A focused view of published advisories and active local research, synced from the canonical Git repository.
Refresh drafts
Reviews every draft without submitting.
225
Total advisories
Browse
Vulnerability reports
13 results
2040-bit certificate signing causes a heap buffer overflow in
Crafted git-receive-pack request can trigger PACK decompression before authorization
Published
High
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes
Published
Low
Nokogiri: Possible Out-of-Bounds Read in Nokogiri::XML::NodeSet#[]
Published
Medium
Nokogiri: Possible Use-After-Free in XInclude Processing
Published
Low
Nokogiri: Possible Use-After-Free when directly using NokogirI::XML::XPathContext beyond document lifetime
Published
Low
Nokogiri: Possible Use-After-Free when Nokogiri::XML::Document#encoding= raises an exception
Published
Low
Nokogiri: Possible Use-After-Free when setting an attribute value via Nokogiri::XML::Attr#value= or #content=
Published
Low
Nokogiri: Possible Use-After-Free when setting Document#root= to an invalid node type
Published
Low
Oj: Stack Buffer Overflow in Oj.dump via Large Indent
Published
High
Out-of-Bounds Write Through Deserialized Nullable Rule IDs
Published
Medium
sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks
Published
Low
sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity
Published
Low
Authenticated internal_user → container RCE via key-level router_settings fallbacks
Submitted
Unpatched
Critical
AVX-512 Out-of-Bounds Read in Dequantization
Submitted
Unpatched
High
Cross-webview IDOR: any webview can fetch queued channel/command payloads belonging to another webview via a predictable, globally-shared ID
Submitted
Unpatched
Medium
Heap Overflow in Convolution-BatchNorm Fusion
Submitted
Unpatched
High
Integer Overflow Enables Heap Corruption in Tile
Submitted
Patched
High
Null Dereference Through Ignored Nested Grammar Deserialization Errors
Submitted
Patched
Medium
NULL Pointer Dereference When Re-encoding an Empty OBEX Unicode Header
Submitted
Unpatched
Medium
Out-of-Bounds Access Through CPU Mask Row Indices
Submitted
Unpatched
Medium
Out-of-Bounds Access Through Narrowed Repetition Bounds
Submitted
Unpatched
Medium
Out-of-Bounds Bitmask Write Through Deserialized Tokenizer Metadata
Submitted
Patched
Medium
Out-of-Bounds Bitmask Write Through Invalid Stop Token IDs
Submitted
Patched
Medium
Out-of-Bounds Read Through Compiled-Tokenizer Substitution
Submitted
Patched
Medium
Out-of-Bounds Read Through Deserialized Adaptive Cache Indices
Submitted
Patched
Medium
Out-of-Bounds Read Through Deserialized FSM Targets
Submitted
Patched
Medium
Out-of-Bounds Read Through Deserialized Grammar Rule References
Submitted
Patched
Medium
Out-of-Bounds Read Through Deserialized Rule Body Expression IDs
Submitted
Patched
Medium
Out-of-Bounds Read Through Draft-Tree Links
Submitted
Patched
Medium
Out-of-Bounds Read Through Mismatched Compiled Bitset Sizes
Submitted
Patched
Medium
Out-of-Bounds Read Through Numeric Lark Token IDs
Submitted
Patched
Medium
Out-of-Bounds Read Through Padded Token IDs
Submitted
Unpatched
Medium
Out-of-Bounds Read Through Self-Referential Capture Metadata
Submitted
Patched
Medium
Out-of-Bounds Read Through Truncated Grammar Expression Data
Submitted
Unpatched
Medium
Out-of-Bounds Write Through an Undersized Tokenizer Vocabulary
Submitted
Unpatched
Medium
Path Traversal in Git Push Checkout
Submitted
Patched
High
Signed Affix-Count Overflow Causes Out-of-Bounds Read in Personal Dictionary Removal
Submitted
Unpatched
Medium
SIMD Fast Path Reads Past the End of Escaped Strings
Submitted
Unpatched
High
Stack Buffer Over-Read in mDNS Packet Processing
Submitted
Unpatched
Medium
Stack Buffer Overflow in Reduction Axis Handling
Submitted
Patched
High
Stored XSS in luci-app-olsr-services leads to root command execution
Submitted
Unpatched
Critical
Unanchored Azure Blob/File URI patterns let a storageUri route the storage initializer — and its Azure AD token — to an attacker-controlled host
Submitted
Unpatched
High
Unauthenticated UBUS list heap buffer over-read
Submitted
Patched
High
Unauthenticated V2 repository unload endpoint disables the served model until process restart
Submitted
Unpatched
High
Updater signing secret key written to disk with default (world/group-readable) permissions
Submitted
Unpatched
High
ACCEPT_UNTRUSTED Skips SAN Validation Entirely
Draft
Critical
ACIQ Calibration Divide-By-Zero Denial Of Service
Draft
Medium
ALTS Handshaker Blocks Worker Threads
Draft
Medium
AVX-512 Pooling Heap Buffer Over-Read
Draft
High
AVX-512 Requantize Out-of-Bounds Read
Draft
High
AVX512 Heap Over-Read in Convolution1D
Draft
High
AVX512 LayerNorm Heap Out-Of-Bounds Read
Draft
High
Bicubic Interpolation Heap Buffer Over-Read
Draft
High
Connection Limit Bypass via Original-Destination Listener Handoff
Draft
Medium
CopyTo Stack Buffer Overflow From Malformed Model Parameters
Draft
High
Crop Axes Stack Buffer Overflow
Draft
High
Crop Expression Heap Out-Of-Bounds Read
Draft
High
Crop Stack Buffer Overflow in ncnnoptimize
Draft
High
Deconvolution Overflow Crashes ncnnoptimize
Draft
Medium
Denial Of Service From Invalid INT8 Scale Term
Draft
Medium
Denial Of Service Via Darknet Config Divide-By-Zero
Draft
Medium
Divide-By-Zero Crash in Int8 Winograd Model Loading
Draft
Medium
Divide-By-Zero DoS During Model Loading
Draft
Medium
Divide-By-Zero DoS During Model Loading
Draft
Medium
Divide-by-Zero DoS in DeconvolutionDepthWise
Draft
Medium
Divide-By-Zero DoS in Depthwise Layer Parsing
Draft
Medium
Divide-By-Zero DoS in YoloDetectionOutput
Draft
Medium
Divide-By-Zero DoS in YOLOv3 Output
Draft
Medium
Divide-By-Zero in Caffe Conversion
Draft
Medium
Divide-By-Zero in ConvolutionDepthWise Loading
Draft
Medium
Einsum Shape Inference Out-Of-Bounds Write
Draft
Medium
Empty Weight Scale Crashes ncnn2int8
Draft
Medium
ext_authz headers_to_add Omitted from Route Cache Clearing
Draft
Critical
Gemm Dimension Overflow Causes Out-of-Bounds Read
Draft
High
GEMM Tile Size Integer Overflow Enables Heap Overflow
Draft
High
GridSample Heap Buffer Over-Read
Draft
High
GroupNorm Heap Out-of-Bounds Read
Draft
High
GroupNorm Zero Group Count Denial Of Service
Draft
Medium
GRU Hidden-State Heap Over-Read
Draft
High
Header Matching Comma-Join Defeats Route RBAC
Draft
Medium
Heap Buffer Over-Read in 3D Convolution
Draft
High
Heap Buffer Over-Read in Bias Shape Inference
Draft
High
Heap Buffer Over-Read in Embed Layer
Draft
High
Heap Buffer Over-Read in Fold Shape Inference
Draft
High
Heap Buffer Over-Read in x86 Interpolation
Draft
High
Heap Buffer Over-Read in x86 Winograd Convolution
Draft
High
Heap Buffer Overflow From Negative Padding
Draft
High
Heap Buffer Overflow from Unchecked CopyTo Offsets
Draft
High
Heap Buffer Overflow in 1D Depthwise Deconvolution
Draft
High
Heap Buffer Overflow in AVX-512 GEMM Model Loading
Draft
High
Heap Buffer Overflow in BatchNorm Fusion
Draft
High
Heap Buffer Overflow in EQ Calibration
Draft
High
Heap Buffer Overflow in FP16 Permute
Draft
High
Heap Buffer Overflow in Int8 Model Optimization
Draft
High
Heap Buffer Overflow in InverseSpectrogram Loading
Draft
High
Heap Buffer Overflow in Model Shape Inference
Draft
High
Heap Buffer Overflow in ncnn2mem
Draft
Medium
Heap Buffer Overflow in NPY Calibration Input
Draft
High
Heap Buffer Overflow in SDPA KV-Cache Outputs
Draft
High
Heap Buffer Overflow in Unfold Inference
Draft
High
Heap Buffer Overflow in Weight-Only Int8 GEMM
Draft
High
Heap Buffer Overflow In x86 Concat
Draft
High
Heap Buffer Overflow in x86 GridSample
Draft
High
Heap Buffer Overflow in x86 Int8 LSTM
Draft
High
Heap Buffer Overflow in x86 Multi-Head Attention
Draft
High
Heap Buffer Overflow in x86 Slice
Draft
High
Heap Buffer Overread From Negative Deconvolution Stride
Draft
High
Heap Buffer Overread in 3D Deconvolution
Draft
High
Heap Buffer Overread in Batched MatMul
Draft
High
Heap Buffer Overread in X86 Slice
Draft
High
Heap Out-of-Bounds Read During Image Resize
Draft
High
Heap Out-of-Bounds Read in AVX Pooling
Draft
High
Heap Out-of-Bounds Read in AVX-512 UnaryOp
Draft
High
Heap Out-of-Bounds Read in Bilinear Interpolation
Draft
High
Heap Out-of-Bounds Read in Crop
Draft
High
Heap Out-of-Bounds Read in Deconvolution1D
Draft
High
Heap Out-Of-Bounds Read in MXNet Conversion
Draft
High
Heap Out-of-Bounds Read in Packed Deconvolution
Draft
High
Heap Out-of-Bounds Read in x86 Cast Conversion
Draft
High
Heap Out-of-Bounds Read in x86 DeformableConv2D
Draft
High
Heap Out-Of-Bounds Read in x86 Padding
Draft
High
Heap Over-Read in DeformableConv2D
Draft
High
Heap Overflow From Negative Output Padding
Draft
High
Heap Overflow in Deconvolution Output Traversal
Draft
High
Heap Overflow in Spectrogram Parameter Loading
Draft
High
HTTP/2 METADATA Queue Grows Without Limit
Draft
Medium
HTTP/3 QPACK Blocked Streams Exhaust Process Memory
Draft
High
InstanceNorm Heap Out-Of-Bounds Read
Draft
High
Int8 Convolution1D Heap-Buffer Overflow
Draft
High
Int8 Reshape Heap Buffer Over-Read
Draft
High
Integer Divide-By-Zero Crashes Int8 Model Loading
Draft
Medium
Integer Overflow Causes Heap Out-of-Bounds Write
Draft
High
Integer Overflow Causes Heap Overflow in Int8 Convolution
Draft
High
Integer Overflow in 3D Deconvolution Causes Invalid Write
Draft
Medium
Integer Overflow in Packed-Weight Indexing
Draft
Medium
Internal Redirect Content-Length Mismatch Enables Request Smuggling
Draft
High
JWT Authentication Bypass via Semicolon Path Parameters
Draft
Critical
LSTM Hidden-State Buffer Over-Read
Draft
High
Malformed Convolution Model Crashes x86 Loader
Draft
Medium
Malformed Convolution Model Crashes X86 Repacking
Draft
Medium
Malformed Deconvolution Weights Cause Model-Loading DoS
Draft
Medium
Malformed Depthwise Weights Crash ncnnoptimize
Draft
Medium
Malformed Int8 Model Crashes x86 Loader
Draft
Medium
Malformed INT8 Model Crashes X86 Loading
Draft
Medium
Malformed Model Causes Division-By-Zero DoS
Draft
Medium
Malformed Model Causes Heap Buffer Over-Read
Draft
High
Malformed Model Causes Heap Out-Of-Bounds Read
Draft
High
Malformed Model Causes Inference Denial Of Service
Draft
Medium
Malformed Model Crashes ncnnoptimize
Draft
Medium
Malformed Padding Model Causes Denial of Service
Draft
Medium
Malformed Reshape Expression Causes Optimizer Denial Of Service
Draft
Medium
MatMul Heap Out-Of-Bounds Read
Draft
High
Model-Triggered Heap Buffer Overflow in x86 GEMM
Draft
High
MultiHeadAttention Dimension Overflow Causes Conversion Crash
Draft
Medium
Namespace-scoped local-model cache can select credentials from the privileged job namespace
Draft
High
Negative Dilation Causes Out-of-Bounds Read
Draft
High
Negative Dilation Enables X86 Heap Out-Of-Bounds Read
Draft
High
Null Dereference in Depthwise Activation Loading
Draft
Medium
Null Dereference in Embed Model Loading
Draft
Medium
Null Dereference in InnerProduct Clip Activation
Draft
Medium
Null Dereference in Int8 Model Loading
Draft
Medium
Null Dereference in Int8 Model Loading
Draft
Medium
Null Dereference in ncnn2table Weight Quantization
Draft
Medium
Null Dereference in Quantized Gemm Loading
Draft
Medium
Null Dereference in YOLO Shape Inference
Draft
Medium
On-Demand SRDS Accumulates Unbounded Pending Callbacks
Draft
High
Out-of-Bounds Access in ACIQ Calibration Lists
Draft
Medium
Out-of-Bounds Access in MXNet Converter
Draft
Medium
Out-of-Bounds Access in MXNet Parameter Parsing
Draft
Medium
Out-of-Bounds Crop Metadata Causes Optimizer Denial of Service
Draft
Medium
Out-of-Bounds Read After Tokenizer Serialization Round-Trip
Draft
Medium
Out-Of-Bounds Read Can Crash ncnnoptimize
Draft
Medium
Out-of-Bounds Read Crashes MXNet Converter
Draft
High
Out-of-Bounds Read Crashes ncnnoptimize
Draft
Medium
Out-Of-Bounds Read During Requantization
Draft
Medium
Out-of-Bounds Read From Negative Kernel Dimensions
Draft
High
Out-of-Bounds Read in AVX Reflection Padding
Draft
Medium
Out-Of-Bounds Read in Eltwise Shape Inference
Draft
High
Out-of-Bounds Read in LLM Calibration
Draft
Medium
Out-of-Bounds Read in ncnnoptimize
Draft
Medium
Out-of-Bounds Read in Packed Quantization
Draft
High
Out-of-Bounds Write in Model Parameter Parsing
Draft
Medium
Packed Scale Tensor Heap Buffer Overflow
Draft
High
Packing Parameter Divide-By-Zero Denial Of Service
Draft
Medium
PixelShuffle Divide-By-Zero DoS
Draft
Medium
PReLU Optimization Invalid Read DoS
Draft
Medium
PReLU Out-of-Bounds Read
Draft
High
Proxy Protocol v2 Header Length Undercount Enables Smuggling
Draft
High
RBAC CEL Evaluation Error Converts DENY Policy into Allow
Draft
Critical
RBAC Header Concatenation Bypasses DENY Exact Match
Draft
High
RMSNorm AVX-512 Out-of-Bounds Read
Draft
High
RNN Heap Buffer Read In ncnnoptimize
Draft
High
RNN Hidden-State Heap Buffer Overflow
Draft
High
RNN Int8 Scale Null Dereference DoS
Draft
Medium
RNN Model Loading Divide-By-Zero DoS
Draft
Medium
ROIAlign Heap Out-Of-Bounds Read
Draft
High
ROIAlign Null Dereference
Draft
Medium
RotaryEmbed Cache Heap Buffer Overflow
Draft
High
SAN OTHER_NAME Truncation Bypasses Exact Match
Draft
Medium
SDPA Mask Channel Heap Buffer Overread
Draft
High
SDPA Shape Mismatch Causes Heap Out-Of-Bounds Read
Draft
High
ShuffleChannel Divide-By-Zero Denial Of Service
Draft
Medium
TLS Session Resumption Crosses Upstream Host Boundary
Draft
Medium
Unbounded InnerProduct Weight Allocation Causes Denial Of Service
Draft
Medium
Unbounded Model Blob Allocation Causes Denial Of Service
Draft
Medium
Unchecked Input Topology Crashes ncnn2table
Draft
Medium
Unchecked YOLOv3 Mask Index Causes Heap Out-Of-Bounds Read
Draft
High
URI-Template Route Bypass via Path Parameters
Draft
High
VHDS Host Subscriptions Grow Without Bound
Draft
High
Weighted Cluster Retry Skips Target Cluster RBAC
Draft
High
XFCC URI SAN Injection via Unquoted Semicolons
Draft
High
Zero Convolution Stride Causes Optimizer DoS
Draft
Medium
Zero Kernel Causes MXNet Converter Crash
Draft
Medium
Zero Kernel Dimensions Cause Model-Loading Denial of Service
Draft
Medium
Zero Pooling Strides Crash ncnnoptimize
Draft
Medium
Zero Reorg Stride Causes Model-Triggered Denial Of Service
Draft
Medium
Zero Stride Causes Model Optimization Denial Of Service
Draft
Medium
Zero-Channel Convolution Causes Model-Load DoS
Draft
Medium
Zero-Head MultiHeadAttention Causes Denial Of Service
Draft
Medium
Continuation Result Panics Stack-Switching Embeddings
Closed draft
Medium
Empty Component Panics Native DWARF Compilation
Closed GHSA
Medium
Exception Reference Global Panics Coredump Serialization
Closed GHSA
Medium
Shared Memory Growth Bypasses the Store Memory Limit
Closed draft
Medium
Unrestricted arbitrary-file read via image|from_path IPC command bypasses the fs scope/SafePathBuf system
Closed draft
Medium
No matching advisories
Try a different term or clear the active filters.