60805 matches found
CVE-2026-96749
An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...
CVE-2026-96749 Heap out-of-bounds write via signed size overflow in BSON document encoding
An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...
CVE-2026-96749
The MongoDB Python Driver is vulnerable to a heap out-of-bounds write within its bundled native extension's BSON document encoding component. The root cause is a signed 32-bit integer overflow occurring during size arithmetic when processing unusually large amounts of caller-supplied data. Becaus...
EUVD-2026-86348
An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...
CVE-2026-88372
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...
CVE-2025-54957
POC del Decodificador Unificado Dolby CVE-2025-54957 Cuando un archivo es procesado por el Decodificador Unificado DDPlus de Dolby, es posible una escritura fuera de límites cuando se procesan los datos de evolución. El decodificador escribe la información de evolución en un búfer contiguo grande...
EUVD-2026-86064
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpiexopcode3A1T1R midop Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy...
CVE-2026-97451
The Linux kernel contains an integer overflow vulnerability within the ACPICA component, specifically in the acpi_ex_opcode_3A_1T_1R() function. The root cause is a missing overflow check when calculating the truncation length from Index + Length parameters. This flaw can result in a negative siz...
CVE-2026-97421
The Linux kernel contains a vulnerability in the RDMA/umem subsystem related to boundary conditions in the ib_umem_find_best_pgsz() function. The root cause involves potential integer truncation and overflow issues, particularly on 32-bit systems, where umem->iova (a u64 value) may be truncate...
EUVD-2026-86034
In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ibumemfindbestpgsz Several corner cases, especially important on 32 bits: - umem-iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the...
CVE-2026-93828
A vulnerability exists in the Linux kernel 's exfat filesystem module. Specifically, the function exfat_create_upcase_table() can enter an infinite loop due to an integer overflow when the size of the upcase table is set to zero (e.g., due to corrupted media or a misbehaving device). The issue is...
EUVD-2026-86217
In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...
CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow
CVE-2026-2222 – Desbordamiento de montón en el paquete CONNECT de broker MQTT Código del programa C + Python root@kitploit: // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; /...
smart-contract-vulnerabilities
Vulnerabilidades de Contratos Inteligentes Una colección de vulnerabilidades de contratos inteligentes junto con métodos de prevención. Consulta /references para referencias optimizadas para LLM. Control de Acceso Autorización mediante tx.origin Control de Acceso Insuficiente Delegatecall a...
CVE-2024-26817-amdkfd
CVE-2024-26817 Encontré una vulnerabilidad de seguridad en AMD KFD en el siguiente archivo drivers/gpu/drm/amd/amdkfd/kfdchardev.c, el identificador de ioctl es AMDKFDIOCGETPROCESSAPERTURESNEW. En la función kfdioctlgetprocessaperturesnew, los datos proporcionados por el usuario de args-numofnode...
kernel: sctp: prevent peer transport count overflow
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...
CVE-2014-0075_PoC
CVE-2014-0075PoC This is a simple PoC written n python that demonstrates the DoS through integer overflow...
CVE-2023-6931
CVE-2023-6931 PoC de Kernel Panic para CVE-2023-6931 Descripción CVE-2023-6931 es una vulnerabilidad en perfevent que conduce a un desbordamiento de búfer en el heap causado por un desbordamiento de enteros en el readsize de un grupo. ¿Qué es un Evento de Rendimiento perf event? perfevents es un...
libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation
A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...
libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow
A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...