Skip to content

Linuxfoundation · weakness class

Memory Corruption

57 CVEs · 1 exploited

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

exploited in the wild
1

Every one of the 57 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use th…CVE-2018-14634The Linux Foundation · CVSS 7.8 · 15% likelycovered by CyberSIXT

    CWE-190

  2. A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is proc…CVE-2018-14633The Linux Foundation · CVSS 7 · 8.7% likely

    CWE-121

  3. Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash…CVE-2015-3258Linuxfoundation · 7.9% likely

    CWE-119

  4. Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and c…CVE-2010-5325Linuxfoundation · 5.5% likely

    CWE-119

  5. Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line…CVE-2013-6473Linuxfoundation · 3.4% likely

    CWE-119

  6. Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file.CVE-2013-6474Linuxfoundation · 3.1% likely

    CWE-119

  7. The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and…CVE-2014-4337Linuxfoundation · 2.9% likely

    CWE-119

  8. A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a later system crash i…CVE-2018-14641The Linux Foundation · CVSS 6.5 · 2.9% likely

    CWE-456

  9. An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.CVE-2020-12059Linuxfoundation · 2.4% likely

    CWE-476

  10. The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).CVE-2020-26521Linuxfoundation · 2.2% likely

    CWE-476

  11. An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker m…CVE-2019-13126Linuxfoundation · 1.8% likely

    CWE-190

  12. Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)CVE-2022-0324Linux Foundation · CVSS 8.1 · 1.6% likely

    CWE-120

  13. A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message w…CVE-2021-43667Linuxfoundation · 1.3% likely

    CWE-476

  14. An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-free.CVE-2021-45701Linuxfoundation · 1.2% likely

    CWE-416

  15. An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-free.CVE-2021-45702Linuxfoundation · 1.1% likely

    CWE-416

  16. The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch…CVE-2019-1010249The Linux Foundation · 1.0% likely

    CWE-190

  17. Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function.CVE-2023-52724Linuxfoundation · CVSS 8.1 · 0.9% likely

    CWE-787

  18. The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_esm_message_container…CVE-2024-24423Linuxfoundation · CVSS 7.5 · 0.6% likely

    CWE-787

  19. The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the decode_protocol_configuration…CVE-2024-24422Linuxfoundation · CVSS 7.5 · 0.6% likely

    CWE-787

  20. The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_traffic_flow_template…CVE-2024-24419Linuxfoundation · CVSS 7.5 · 0.6% likely

    CWE-120

  21. The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_pdn_address function…CVE-2024-24418Linuxfoundation · CVSS 7.5 · 0.6% likely

    CWE-120

  22. The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuratio…CVE-2024-24417Linuxfoundation · CVSS 7.5 · 0.6% likely

    CWE-120

  23. The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_access_point_name_ie…CVE-2024-24416Linuxfoundation · CVSS 7.5 · 0.6% likely

    CWE-120

  24. A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in…CVE-2018-16880The Linux Foundation · CVSS 5.9 · 0.6% likely

    CWE-787

  25. Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits.CVE-2023-52727Linuxfoundation · CVSS 8.1 · 0.5% likely

    CWE-125

  26. In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.CVE-2025-46152Linuxfoundation · CVSS 5.3 · 0.5% likely

    CWE-787

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.