TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad

GitHub: CVE-2023-25652 "git apply --reject" partially-controlled arbitrary file write

Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

Field `file_table` of `struct module *module` is uninitialized

Out of bounds read in parse_module function in bfd/vms-alpha.c

Werkzeug may allow high resource usage when parsing multipart form data with many fields

GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information

GSS-NTLMSSP vulnerable to memory leak when parsing usernames

GSS-NTLMSSP vulnerable to incorrect free when decoding target information

GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings

GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753.

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.

Integer Overflow in several Redis commands can lead to denial of service.

containerd OCI image importer memory exhaustion

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors.