# Vulnerabilities published in 2021


- [OSV-2017-138](https://insights.sbomify.com/OSV-2017-138/): Heap-use-after-free in gnutls_x509_crl_deinit (not scored)
- [OSV-2017-134](https://insights.sbomify.com/OSV-2017-134/): Heap-buffer-overflow in cdf_file_property_info (not scored)
- [OSV-2017-131](https://insights.sbomify.com/OSV-2017-131/): Heap-buffer-overflow in mprint (not scored)
- [OSV-2017-13](https://insights.sbomify.com/OSV-2017-13/): Heap-buffer-overflow in File::Write (not scored)
- [OSV-2017-126](https://insights.sbomify.com/OSV-2017-126/): Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start (not scored)
- [OSV-2017-121](https://insights.sbomify.com/OSV-2017-121/): Global-buffer-overflow in vte_write_debug (not scored)
- [OSV-2017-120](https://insights.sbomify.com/OSV-2017-120/): Global-buffer-overflow in csnStreamDissector (not scored)
- [OSV-2017-119](https://insights.sbomify.com/OSV-2017-119/): Stack-buffer-overflow in ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId (not scored)
- [OSV-2017-117](https://insights.sbomify.com/OSV-2017-117/): Use-of-uninitialized-value in CharToWide (not scored)
- [OSV-2017-116](https://insights.sbomify.com/OSV-2017-116/): Use-after-poison in rawspeed::OrfDecoder::decodeCompressed (not scored)
- [OSV-2017-114](https://insights.sbomify.com/OSV-2017-114/): Use-of-uninitialized-value in __gxx_personality_v0 (not scored)
- [OSV-2017-113](https://insights.sbomify.com/OSV-2017-113/): Use-of-uninitialized-value in CommandData::IsProcessFile (not scored)
- [OSV-2017-110](https://insights.sbomify.com/OSV-2017-110/): Use-of-uninitialized-value in ExtractUnixLink30 (not scored)
- [OSV-2017-109](https://insights.sbomify.com/OSV-2017-109/): Use-of-uninitialized-value in Unpack::MakeDecodeTables (not scored)
- [OSV-2017-108](https://insights.sbomify.com/OSV-2017-108/): Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address (not scored)
- [OSV-2017-104](https://insights.sbomify.com/OSV-2017-104/): Heap-buffer-overflow in Unpack::CopyString (not scored)
- [OSV-2017-102](https://insights.sbomify.com/OSV-2017-102/): Use-of-uninitialized-value in match (not scored)
- [OSV-2017-101](https://insights.sbomify.com/OSV-2017-101/): Heap-double-free in ExtensionObject_deleteMembers (not scored)
- [OSV-2017-100](https://insights.sbomify.com/OSV-2017-100/): Use-of-uninitialized-value in Archive::ConvertAttributes (not scored)
- [OSV-2017-10](https://insights.sbomify.com/OSV-2017-10/): Heap-use-after-free in UA_Subscription_answerPublishRequestsNoSubscription (not scored)
- [OSV-2017-1](https://insights.sbomify.com/OSV-2017-1/): Index-out-of-bounds in fuzz_send_next_response (not scored)
- [OSV-2016-7](https://insights.sbomify.com/OSV-2016-7/): Heap-buffer-overflow in mcopy (not scored)
- [OSV-2016-6](https://insights.sbomify.com/OSV-2016-6/): UNKNOWN READ in mprint (not scored)
- [OSV-2016-5](https://insights.sbomify.com/OSV-2016-5/): Global-buffer-overflow in vte_write_debug (not scored)
- [OSV-2016-4](https://insights.sbomify.com/OSV-2016-4/): Global-buffer-overflow in vte_write_debug (not scored)
- [OSV-2016-3](https://insights.sbomify.com/OSV-2016-3/): UNKNOWN READ in file_regexec (not scored)
- [OSV-2016-2](https://insights.sbomify.com/OSV-2016-2/): UNKNOWN READ in file_regexec (not scored)
- [OSV-2016-1](https://insights.sbomify.com/OSV-2016-1/): UNKNOWN READ in mprint (not scored)
- [MAL-2021-5](https://insights.sbomify.com/MAL-2021-5/): Malicious code in portal-shell (npm) (malicious package)
- [MAL-2021-4](https://insights.sbomify.com/MAL-2021-4/): Malicious code in lib-bb-html-sanitizer (npm) (malicious package)
- [MAL-2021-3](https://insights.sbomify.com/MAL-2021-3/): Malicious code in digital-marketing-client (npm) (malicious package)
- [MAL-2021-2](https://insights.sbomify.com/MAL-2021-2/): Malicious code in dbp-polyfills (npm) (malicious package)
- [MAL-2021-1](https://insights.sbomify.com/MAL-2021-1/): Malicious code in cxp-jquery (npm) (malicious package)
- [GSD-2021-1002847](https://insights.sbomify.com/GSD-2021-1002847/): tun: avoid double free in tun_free_netdev (not scored)
- [GSD-2021-1002846](https://insights.sbomify.com/GSD-2021-1002846/): pinctrl: mediatek: fix global-out-of-bounds issue (not scored)
- [GSD-2021-1002845](https://insights.sbomify.com/GSD-2021-1002845/): hamradio: defer ax25 kfree after unregister_netdev (not scored)
- [GSD-2021-1002844](https://insights.sbomify.com/GSD-2021-1002844/): hamradio: improve the incomplete fix to avoid NPD (not scored)
- [GSD-2021-1002843](https://insights.sbomify.com/GSD-2021-1002843/): phonet/pep: refuse to enable an unbound pipe (not scored)
- [GSD-2021-1002842](https://insights.sbomify.com/GSD-2021-1002842/): f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (not scored)
- [GSD-2021-1002841](https://insights.sbomify.com/GSD-2021-1002841/): tee: optee: Fix incorrect page free bug (not scored)
- [GSD-2021-1002840](https://insights.sbomify.com/GSD-2021-1002840/): mm, hwpoison: fix condition in free hugetlb page path (not scored)
- [GSD-2021-1002839](https://insights.sbomify.com/GSD-2021-1002839/): mm/damon/dbgfs: protect targets destructions with kdamond_lock (not scored)
- [GSD-2021-1002838](https://insights.sbomify.com/GSD-2021-1002838/): kfence: fix memory leak when cat kfence objects (not scored)
- [GSD-2021-1002837](https://insights.sbomify.com/GSD-2021-1002837/): mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() (not scored)
- [GSD-2021-1002836](https://insights.sbomify.com/GSD-2021-1002836/): mac80211: fix locking in ieee80211_start_ap error path (not scored)
- [GSD-2021-1002835](https://insights.sbomify.com/GSD-2021-1002835/): KVM: VMX: Always clear vmx->fail on emulation_required (not scored)
- [GSD-2021-1002834](https://insights.sbomify.com/GSD-2021-1002834/): platform/x86: intel_pmc_core: fix memleak on registration failure (not scored)
- [GSD-2021-1002833](https://insights.sbomify.com/GSD-2021-1002833/): KVM: x86/mmu: Don't advance iterator after restart due to yielding (not scored)
- [GSD-2021-1002832](https://insights.sbomify.com/GSD-2021-1002832/): ipmi: fix initialization when workqueue allocation fails (not scored)
- [GSD-2021-1002831](https://insights.sbomify.com/GSD-2021-1002831/): ipmi: ssif: initialize ssif_info->client early (not scored)
- [GSD-2021-1002830](https://insights.sbomify.com/GSD-2021-1002830/): ALSA: rawmidi - fix the uninitalized user_pversion (not scored)
- [GSD-2021-1002829](https://insights.sbomify.com/GSD-2021-1002829/): Input: elantech - fix stack out of bound access in elantech_change_report_id() (not scored)
- [GSD-2021-1002828](https://insights.sbomify.com/GSD-2021-1002828/): net: stmmac: ptp: fix potentially overflowing expression (not scored)
- [GSD-2021-1002827](https://insights.sbomify.com/GSD-2021-1002827/): hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations (not scored)
- [GSD-2021-1002826](https://insights.sbomify.com/GSD-2021-1002826/): veth: ensure skb entering GRO are not cloned. (not scored)
- [GSD-2021-1002825](https://insights.sbomify.com/GSD-2021-1002825/): ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module (not scored)
- [GSD-2021-1002824](https://insights.sbomify.com/GSD-2021-1002824/): asix: fix uninit-value in asix_mdio_read() (not scored)
- [GSD-2021-1002823](https://insights.sbomify.com/GSD-2021-1002823/): net: marvell: prestera: fix incorrect structure access (not scored)
- [GSD-2021-1002822](https://insights.sbomify.com/GSD-2021-1002822/): inet: fully convert sk->sk_rx_dst to RCU rules (not scored)
- [GSD-2021-1002821](https://insights.sbomify.com/GSD-2021-1002821/): IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (not scored)
- [GSD-2021-1002820](https://insights.sbomify.com/GSD-2021-1002820/): ice: xsk: return xsk buffers back to pool when cleaning the ring (not scored)
- [GSD-2021-1002819](https://insights.sbomify.com/GSD-2021-1002819/): netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() (not scored)
- [GSD-2021-1002818](https://insights.sbomify.com/GSD-2021-1002818/): NFSD: Fix READDIR buffer overflow (not scored)
- [GSD-2021-1002817](https://insights.sbomify.com/GSD-2021-1002817/): drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf (not scored)
- [GSD-2021-1002816](https://insights.sbomify.com/GSD-2021-1002816/): phonet/pep: refuse to enable an unbound pipe (not scored)
- [GSD-2021-1002815](https://insights.sbomify.com/GSD-2021-1002815/): hamradio: improve the incomplete fix to avoid NPD (not scored)
- [GSD-2021-1002814](https://insights.sbomify.com/GSD-2021-1002814/): hamradio: defer ax25 kfree after unregister_netdev (not scored)
- [GSD-2021-1002813](https://insights.sbomify.com/GSD-2021-1002813/): f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (not scored)
- [GSD-2021-1002812](https://insights.sbomify.com/GSD-2021-1002812/): pinctrl: mediatek: fix global-out-of-bounds issue (not scored)
- [GSD-2021-1002811](https://insights.sbomify.com/GSD-2021-1002811/): tee: optee: Fix incorrect page free bug (not scored)
- [GSD-2021-1002810](https://insights.sbomify.com/GSD-2021-1002810/): mac80211: fix locking in ieee80211_start_ap error path (not scored)
- [GSD-2021-1002809](https://insights.sbomify.com/GSD-2021-1002809/): mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() (not scored)
- [GSD-2021-1002808](https://insights.sbomify.com/GSD-2021-1002808/): platform/x86: intel_pmc_core: fix memleak on registration failure (not scored)
- [GSD-2021-1002807](https://insights.sbomify.com/GSD-2021-1002807/): Input: elantech - fix stack out of bound access in elantech_change_report_id() (not scored)
- [GSD-2021-1002806](https://insights.sbomify.com/GSD-2021-1002806/): ipmi: ssif: initialize ssif_info->client early (not scored)
- [GSD-2021-1002805](https://insights.sbomify.com/GSD-2021-1002805/): ipmi: fix initialization when workqueue allocation fails (not scored)
- [GSD-2021-1002804](https://insights.sbomify.com/GSD-2021-1002804/): ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module (not scored)
- [GSD-2021-1002803](https://insights.sbomify.com/GSD-2021-1002803/): IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (not scored)
- [GSD-2021-1002802](https://insights.sbomify.com/GSD-2021-1002802/): phonet/pep: refuse to enable an unbound pipe (not scored)
- [GSD-2021-1002801](https://insights.sbomify.com/GSD-2021-1002801/): hamradio: improve the incomplete fix to avoid NPD (not scored)
- [GSD-2021-1002800](https://insights.sbomify.com/GSD-2021-1002800/): f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (not scored)
- [GSD-2021-1002799](https://insights.sbomify.com/GSD-2021-1002799/): pinctrl: mediatek: fix global-out-of-bounds issue (not scored)
- [GSD-2021-1002798](https://insights.sbomify.com/GSD-2021-1002798/): hamradio: defer ax25 kfree after unregister_netdev (not scored)
- [GSD-2021-1002797](https://insights.sbomify.com/GSD-2021-1002797/): tee: optee: Fix incorrect page free bug (not scored)
- [GSD-2021-1002796](https://insights.sbomify.com/GSD-2021-1002796/): ipmi: fix initialization when workqueue allocation fails (not scored)
- [GSD-2021-1002795](https://insights.sbomify.com/GSD-2021-1002795/): ipmi: ssif: initialize ssif_info->client early (not scored)
- [GSD-2021-1002794](https://insights.sbomify.com/GSD-2021-1002794/): Input: elantech - fix stack out of bound access in elantech_change_report_id() (not scored)
- [GSD-2021-1002793](https://insights.sbomify.com/GSD-2021-1002793/): ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module (not scored)
- [GSD-2021-1002792](https://insights.sbomify.com/GSD-2021-1002792/): IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (not scored)
- [GSD-2021-1002791](https://insights.sbomify.com/GSD-2021-1002791/): phonet/pep: refuse to enable an unbound pipe (not scored)
- [GSD-2021-1002790](https://insights.sbomify.com/GSD-2021-1002790/): hamradio: improve the incomplete fix to avoid NPD (not scored)
- [GSD-2021-1002789](https://insights.sbomify.com/GSD-2021-1002789/): hamradio: defer ax25 kfree after unregister_netdev (not scored)
- [GSD-2021-1002788](https://insights.sbomify.com/GSD-2021-1002788/): f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (not scored)
- [GSD-2021-1002787](https://insights.sbomify.com/GSD-2021-1002787/): ipmi: fix initialization when workqueue allocation fails (not scored)
- [GSD-2021-1002786](https://insights.sbomify.com/GSD-2021-1002786/): IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (not scored)
- [GSD-2021-1002785](https://insights.sbomify.com/GSD-2021-1002785/): ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module (not scored)
- [GSD-2021-1002784](https://insights.sbomify.com/GSD-2021-1002784/): phonet/pep: refuse to enable an unbound pipe (not scored)
- [GSD-2021-1002783](https://insights.sbomify.com/GSD-2021-1002783/): hamradio: improve the incomplete fix to avoid NPD (not scored)
- [GSD-2021-1002782](https://insights.sbomify.com/GSD-2021-1002782/): hamradio: defer ax25 kfree after unregister_netdev (not scored)
- [GSD-2021-1002781](https://insights.sbomify.com/GSD-2021-1002781/): f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/12/