263307 matches found
EUVD-2026-49858
schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on attacker-controlled MP3 metadata...
EUVD-2026-49863
schreibfaul1 ESP32-audioI2S 3.4.5 is vulnerable to Buffer Overflow. The Audio::openaispeech function in the Audio library manually constructs JSON request bodies and HTTP request headers by directly concatenating externally controllable input and instructions strings without effective length...
CVE-2026-51252
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
FreeBSD : Erlang/OTP -- megaco flex scanner buffer overflow (445da2cc-89e1-11f1-b35c-4c526214c986)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445da2cc-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-7xgh-gmgf-q2g7 reports: A remote unauthenticated...
Linux Distros Unpatched Vulnerability : CVE-2026-59250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially...
ALSA-2026:47104 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in the DOM: Navigation...
ALSA-2026:47079 Important: libXfont2 security update
X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 libXfont2: PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...
CVE-2026-51251
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51263
...
CVE-2026-51251
...
CVE-2026-51251
CVE-2026-51251 has concrete details in connected sources: ESP32-audioI2S 3.4.5 contains a buffer overflow in the MP3Decoder::decode() function of the MP3 decoder, caused by missing size validation on untrusted mainDataBegin and nSlots values. This vulnerability is specific to that component/versi...
CVE-2026-51275
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51252
The connected records identify a concrete issue: ESP32-audioI2S 3.4.5 contains a buffer overflow in MP3Decoder::UnpackSFMPEG1 caused by missing input validation on attacker-controlled MP3 metadata. This is a vulnerability in the MP3 decoding path; exploitation details are not provided in the docu...
CVE-2026-51266
CVE-2026-51266 is rejected/not used and does not represent an active vulnerability entry.
RHEL 8 : libpq (RHSA-2026:47090)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47090 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql:...
The vulnerability of the wilc_wlan_parse_response_frame() function in the drivers/net/wireless/microchip/wilc1000/wlan_cfg.c module of the Microchip wireless communication adapter driver software for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the wilcwlanparseresponseframe function in the drivers/net/wireless/microchip/wilc1000/wlancfg.c module of the Microchip wireless communication adapter driver software is related to the copying of buffers without checking the size of the input data a classic buffer overflow...
MiracleLinux 9 : postgresql-13.23-3.el9_8 (AXSA:2026-1366:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1366:07 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...
Linux Distros Unpatched Vulnerability : CVE-2026-51235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch function src/librawcxx.cpp and fujirotate function src/decoders/fuji.cpp. CVE-2026-51235 Note that...