Package · Wolfi

openjdk-7-jre-lib

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

23 results · Feed

Medium 5.6

CVE-2025-30698

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Apr 15, 2025
High 7.4

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Apr 15, 2025
High 7.3

CVE-2025-0509

Signing Checks Bypass

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks.

sparkle-project Sparkle openjdk-9 openjdk-13 Ubuntu Wolfi SwiftURL

Feb 4, 2025
Medium 4.8

CVE-2025-21502

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jan 21, 2025
High 8.8

CVE-2024-54534

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Dec 11, 2024
Medium 5.1

CVE-2024-47778

GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which c…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Medium 5.1

CVE-2024-47777

GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk function within gstwavparse.c. This function attempts to read 4 bytes from the data + 12 offset without c…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Medium 5.1

CVE-2024-47776

GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value …

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Medium 5.1

CVE-2024-47775

GHSL-2024-261: GStreamer has an OOB-read in parse_ds64

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavparse.c. The parse_ds64 function does not check that the buffer buf contains sufficient data before a…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
High 8.6

CVE-2024-47606

GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which …

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Medium 5.1

CVE-2024-47597

GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of th…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Medium 5.1

CVE-2024-47596

GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file without proper validatio…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Medium 6.9

CVE-2024-47546

GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in an underflow if atom_…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Medium 6.9

CVE-2024-47545

GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overfl…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Medium 6.8

CVE-2024-47544

GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling

GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
High 7.4

CVE-2024-20952

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
Medium 5.1

CVE-2023-22041

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jul 18, 2023
Medium 5.9

CVE-2023-21967

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 18, 2023
Medium 5.9

CVE-2023-21954

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 18, 2023
Medium 5.3

CVE-2023-21939 Public exploit

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Su…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 18, 2023
Low 3.7

CVE-2023-21937

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 18, 2023
Low 3.7

CVE-2023-21938

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 18, 2023
High 7.4

CVE-2023-21930

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 18, 2023