Out-of-bounds write in libcue from a negative INDEX number
atoi has no way to report failure, and track_set_index only checked one end of the array.
found by Kevin Backhouse, GitHub Security Lab
linux
Exploiting a use-after-free race in the Linux kernel's vivid driver
There is a Linux driver whose entire job is to pretend. `vivid` emulates video4linux hardware (capture devices, output devices, radio receivers and transmitters, a software-defined radio). You can…
found by Alexander Popov, Positive Technologies