71788 matches found
CVE-2026-54697
The ConnectBot SSH Client Library (prior to version 0.3.1 ) is vulnerable to an integer overflow and excessive memory allocation in its DER parser. Specifically, DerReader.readLength() fails to safely validate long-form DER length octets before accumulating them into an Int. This allows an attack...
CVE-2026-54697 ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate arrays without checking the declared size against the remaining...
cpiopwn
cpiopwn CVE-2021-38185 This is an ACE POC of an integer overflow bug in cpio. This exploit bypasses all binary protections except full RELRO. This exploit uses cpio 2.13 and libc 2.31. Video demo: https://youtu.be/F0yKJhu7Vak Running the exploit We've provided a Kali Dockerfile to run the exploit...
CVE-2026-77093
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...
CVE-2026-90246
A flaw was found in AppArmor within the Linux kernel. An unprivileged user can exploit an integer overflow vulnerability in the verifytags function by crafting a malicious AppArmor policy. This flaw allows an attacker to trigger an out-of-bounds read during policy loading, which could lead to...
CVE-2026-90245
A flaw was found in the Linux kernel's fbdev kyro driver. This vulnerability arises from the calculation of overlay viewport end coordinates using 32-bit unsigned arithmetic. Large input values can cause these calculations to wrap around, resulting in incorrect coordinates being passed to the...
CVE-2026-90200
A flaw was found in the Linux kernel's NTFS3 file system driver. An integer overflow vulnerability exists in the Multi-File Table MFT cluster validation logic. When processing a specially crafted boot sector, the driver fails to properly validate MFT cluster numbers due to an integer overflow...
CVE-2026-90196
A flaw was found in the Linux kernel's Sound Open Firmware SOF component. This vulnerability occurs due to improper validation of topology mixer volume ranges. An attacker could potentially provide malformed volume range values, leading to an integer overflow during memory allocation. This could...
CVE-2026-90141
A flaw was found in the Linux kernel's IP Virtual Server IPVS FTP helper. A remote attacker could exploit an integer overflow vulnerability in the ipvsftpgetaddrport function by sending a specially crafted FTP PASV/EPSV response. This could cause the FTP helper to configure data connections with...
CVE-2026-77093 CvFWD Denial of Service
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...
CVE-2026-77093
Commvault CvFWD is vulnerable to an integer overflow that impacts service availability. Affected installations include CommServe , Webserver , Command Center , MediaAgents , Clients , and HyperScale . To remediate this issue, customers should upgrade to the resolved maintenance release provided b...
CVE-2025-58771
The AMI APTIOV BIOS contains vulnerabilities where local access can trigger an Integer Overflow or Wraparound (CWE-190). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's confidentiality, integrity, and ava...
Windows Client for NFS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...
Windows IP Over USB Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally...
.NET Framework Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
Windows iSCSI Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network...
HEVC Video Extensions Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...