Threat database

FreeRDP versions before 2.11.8-11.oe2403sp1 contain multiple vulnerabilities including heap buffer overflows, out-of-bounds reads, and uninitialized memory disclosures. These flaws arise from improper validation and handling of certain protocol fields and messages, potentially allowing a malicious RDP server or man-in-the-middle to cause client crashes, denial of service, or enable remote code execution when combined with other vulnerabilities. The issues are fixed in version 2.11.8-11.oe2403sp1.

A cryptographic vulnerability was identified in Mozilla Firefox's Security Block-lists, Allow-lists, and other State component. This issue affects versions prior to Firefox 153.5.1-1.oe2403sp4 and was addressed in Firefox 158.0.1 and related ESR and Thunderbird versions. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity level. No known exploits are reported in the wild.

A security vulnerability in GNU Emacs before version 29.1-12.oe2403sp4 allows OS command injection via a filename due to an incomplete list of disallowed inputs in tramp-user-regexp. This issue is a regression from an incomplete fix for a previous vulnerability (CVE-2026-79992).

A heap out-of-bounds (OOB) write vulnerability exists in the Mutt email client in the convert_file_from_to() function. This flaw can be triggered via a crafted Content-Type header when an email is used as a template. The issue affects versions prior to 2.3.2-2.oe2403sp4 and has a low severity rating.

xdg-dbus-proxy versions before 0.1.2-3.oe2403sp4 contain a vulnerability that allows bypassing message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. This flaw can be exploited by a malicious or compromised Flatpak app to execute arbitrary code outside its sandbox. The issue arises from incorrect message filtering implementation. A fix is available in version 0.1.2-3.oe2403sp4.

A timing and cache side-channel vulnerability exists in OpenSSL's SM2 private key operations on ARM64 and RISC-V platforms due to a non-constant-time scalar multiplication implementation. This flaw allows an attacker who can measure timing or cache access patterns during SM2 signing or decryption to potentially learn information about the secret scalar. The issue affects OpenSSL versions 4.0, 3.6, 3.5, and 3.4 on these architectures. Versions 3.0, 1.1.1, and 1.0.2 are not affected. Fixes are available in OpenSSL 4.0.3, 3.6.5, 3.5.9, and 3.4.8.

Multiple security vulnerabilities exist in Apache HTTP Server mod_auth_digest before version 2.4.69. These include missing authentication checks allowing unauthenticated denial of service, authentication bypass via replay attacks under certain configurations, and use-after-free conditions causing authentication state corruption. All issues are resolved in version 2.4.69.