262693 matches found
PT-2026-65126
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 watchOS versions prior to 26.6 Description A buffer overflow occurs due to insufficient bounds checking. Connecting to a...
PT-2026-65084
LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch function src/libraw cxx.cpp and fuji rotate function src/decoders/fuji.cpp...
CVE-2026-51244
...
Уязвимость пакетов программ Microsoft Office, Word и 365 Apps for Enterprise, позволяющая нарушителю выполнить произвольный код
Уязвимость пакетов программ Microsoft Office, Word и 365 Apps for Enterprise связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
ROS-20260727-73-0029
A vulnerability in the Apache HTTP Server is related to a buffer overflow at the start of the buffer. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...
CVE-2026-51244
The CVE-2026-51244 entry is corroborated by multiple connected sources describing a buffer overflow in ESP32-audioI2S 3.4.5 via UnpackFrameHeader. The vulnerability arises from multiple attacker-controlled index parameters used to access static and heap table arrays without proper range checks, c...
Erlang/OTP -- megaco flex scanner buffer overflow
https://github.com/erlang/otp/security/advisories/GHSA-7xgh-gmgf-q2g7 reports: A remote unauthenticated attacker can crash Erlang nodes running the megaco text codec with the flex scanner option by sending an H.248/Megaco message with a property parm name exceeding 452 bytes. The overflow occurs ...
Siemens SIMATIC S7-1500 CPU 1518 MFP Classic Buffer Overflow (CVE-2025-21780)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505718; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
PT-2026-65231
Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.6 Description A buffer overflow occurs due to insufficient size validation, which may allow an application to cause unexpected system termination. A buffer overflow is a condition where a program writes more da...
RHEL 8 : tigervnc (RHSA-2026:46460)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:46460 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...
sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
Updated giflib packages fix a security vulnerability
The updated packages fix a security vulnerability: Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size. CVE-2026-26740...
SUSE CVE-2026-64304
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser rsahelper.c bounds each CRT component p, q, dp, dq, qinv by the modulus size nsz, but qatrsasetkeycrt allocates half-size DMA buffers keysz / 2 and...
SUSE CVE-2026-64495
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i if...
CVE-2026-64446
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtwcfg80211setwpaie supplicantie is a 256-byte array in struct securitypriv. The WPA and WPA2 IE copy paths use: memcpypadapter-securitypriv.supplicantie, &pwpa0, wpaielen + 2; wher...
CVE-2026-64354
In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...
CVE-2026-64504
In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FIFO frame count bmc150accelfifoflush copies the number of samples the device reports in its hardware FIFO into an on-stack buffer u16 bufferBMC150ACCELFIFOLENGTH 3; which is sized fo...
CVE-2026-64380
In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posixinfosidsize reads sid1 to obtain the subauthority count, but its existing boundary check still accepts buffers with only one remaining byte. Require two bytes before reading sid1 ...
CVE-2026-64495
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i if...