The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.

The (1) order and (2) group methods in ZendDbSelect in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.

Potential SQL injection in ORDER and GROUP statements of ZendDbSelect

A stack overflow vulnerability was found in nan functions that could cause applications which process long strings with the nan function to crash or, potentially, execute arbitrary code.

Upstream bug:

https://sourceware.org/bugzilla/showbug.cgi?id=16962

CVE assignment:

http://seclists.org/oss-sec/2016/q1/153