# CVEs published 2022-06-18

20 CVEs were published on June 18, 2022: 0 critical, 2 high. Days are UTC.

- [CVE-2022-33987](https://cve.now/CVE-2022-33987.md): The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket. (no CVSS, got)
- [CVE-2021-46822](https://cve.now/CVE-2021-46822.md): The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer an (no CVSS)
- [CVE-2022-33981](https://cve.now/CVE-2022-33981.md): drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw (CVSS 3.3)
- [CVE-2021-46823](https://cve.now/CVE-2021-46823.md): python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regula (no CVSS, python-ldap)
- [CVE-2014-125017](https://cve.now/CVE-2014-125017.md): FFmpeg rpza\_decode\_stream memory corruption (CVSS 7.3, FFmpeg)
- [CVE-2014-125016](https://cve.now/CVE-2014-125016.md): FFmpeg utils.c ff\_init\_buffer\_info memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125015](https://cve.now/CVE-2014-125015.md): FFmpeg read\_var\_block\_data memory corruption (CVSS 7.3, FFmpeg)
- [CVE-2014-125014](https://cve.now/CVE-2014-125014.md): FFmpeg HEVC Video Decoder memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125013](https://cve.now/CVE-2014-125013.md): FFmpeg msrle.c msrle\_decode\_frame memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125012](https://cve.now/CVE-2014-125012.md): FFmpeg dxtroy.c integer coercion (CVSS 5.3, FFmpeg)
- [CVE-2014-125011](https://cve.now/CVE-2014-125011.md): FFmpeg ansi.c decode\_frame integer coercion (CVSS 5.3, FFmpeg)
- [CVE-2014-125010](https://cve.now/CVE-2014-125010.md): FFmpeg h64.c decode\_slice\_header memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125009](https://cve.now/CVE-2014-125009.md): FFmpeg snow.h add\_yblock memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125008](https://cve.now/CVE-2014-125008.md): FFmpeg oggparsevorbis.c vorbis\_header memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125007](https://cve.now/CVE-2014-125007.md): FFmpeg hevcpred\_template.c intra\_pred memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125006](https://cve.now/CVE-2014-125006.md): FFmpeg h264.c output\_frame memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125005](https://cve.now/CVE-2014-125005.md): FFmpeg mpeg4videodec.c decode\_vol\_header memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125004](https://cve.now/CVE-2014-125004.md): FFmpeg vmnc.c decode\_hextile memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125003](https://cve.now/CVE-2014-125003.md): FFmpeg jpeg2000dec.c get\_siz memory corruption (CVSS 5.3, FFmpeg)
- [CVE-2014-125002](https://cve.now/CVE-2014-125002.md): FFmpeg dnxhdenc.c dnxhd\_init\_rc memory corruption (CVSS 5.3, FFmpeg)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.