CVE-2026-112274 libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causin...

CVE-2026-112274 libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causin...

CVE-2026-112274 libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causin...

EUVD-2026-104299

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causin...

CVE-2026-112274

libtins through version 4.6 is vulnerable to an out-of-bounds read within the DNS::soa_record::init function. The root cause is the lack of NUL termination checks when processing SOA data ; specifically, attackers can provide raw SOA RDATA without a zero byte, causing the strlen function to overr...

CVE-2026-112274

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causin...

CVE-2026-112273 libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::composename in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority...

CVE-2026-112273

The libtins library (through version 4.6 ) is vulnerable to a heap out-of-bounds read in the DNS::compose_name function located in src/dns.cpp. This vulnerability occurs when a remote attacker sends a crafted DNS packet where a label ends exactly at the packet end, causing the parser to read one ...

CVE-2026-112272

The software libdisplay-info 0.4.0 is vulnerable to a heap out-of-bounds read within the DisplayID v2 section parser located in displayid2.c. The root cause is the handling of oversized data block lengths , which allows an attacker to over-advance the parse cursor and read past the EDID buffer . ...

CVE-2026-112272 libdisplay-info 0.4.0 Heap Out-of-Bounds Read via DisplayID v2 Parser

Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that allows attackers to read past the EDID buffer via oversized data block lengths. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or file...

EUVD-2026-104301

Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that allows attackers to read past the EDID buffer via oversized data block lengths. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or file...

EUVD-2026-104300

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::composename in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority...

CVE-2026-112273 libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::composename in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority...

CVE-2026-112272 libdisplay-info 0.4.0 Heap Out-of-Bounds Read via DisplayID v2 Parser

Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that allows attackers to read past the EDID buffer via oversized data block lengths. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or file...

CVE-2026-112273

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::composename in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority...

CVE-2026-112271 libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser

libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to...

CVE-2026-112271

Versions of libdisplay-info through 0.4.0 are affected by a heap out-of-bounds read vulnerability in the DisplayID v1 section parser located in displayid.c . The issue occurs when a data block's declared length exceeds the actual section size, specifically causing the is_all_zeroes function to re...

EUVD-2026-104302

libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to...

CVE-2026-112271 libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser

libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to...

CVE-2026-112271 libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser

libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to...