EUVD-2026-80624

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtwrestructwmmie rtwrestructwmmie scans inie for a WMM IE with: while i inlen ... if i + 5 inlen && iniei == 0xDD && ... ... break; i += iniei + 1 + 2; / to the next IE element / When the "i + ...

Exploit for CVE-2026-90781

CVE-2026-90781 — alsa-lib OOB Write Reproducer Standalone C r...

CVE-2025-48990

NeKernal is a free and open-source operating system stack. Version 0.0.2 has a 1-byte heap overflow in rtcopymemory, which unconditionally wrote a null terminator at dstlen. When len equals the size of the destination buffer 256 bytes, that extra '\0' write overruns the buffer by one byte. To avo...

CVE-2025-5278

A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitiv...

sqlite3: heap-buffer-overflow in sqlite3Utf16ByteLen

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include "/src/sqlite3/bld/sqlite3.h" include include include extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size sqlite3 db; if sqlite3open":memory:", &db != SQLITEOK return 0; // Use size...

openbabel: global-buffer-overflow in OpenBabel::generate_sequence

With the following new fuzz target: include include include include include "/src/openbabel/include/openbabel/inchiformat.h" include "/src/openbabel/include/openbabel/format.h" // Fixed line include extern "C" int LLVMFuzzerTestOneInputconst uint8t Data, sizet Size using namespace std; using...

pjsip: Heap-buffer-overflow in pjmedia_rtcp_fb_parse_rpsi

With the new following fuzz target: include "/src/pjsip/pjmedia/include/pjmedia/rtcpfb.h" include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size if size & /src/llvm-project/compiler-r...

pjsip: Heap-buffer-overflow in pjmedia_rtcp_fb_parse_sli

With the new following fuzz target: include "/src/pjsip/pjmedia/include/pjmedia/rtcpfb.h" include include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size // pjmediartcpfbcommon doesn't have a 'length' member. // We need to ensure enough data for the header at least if size =...

pjsip: Heap-buffer-overflow in pjmedia_rtcp_fb_parse_sli

With the new following fuzz target: include "/src/pjsip/pjmedia/include/pjmedia/rtcpfb.h" include include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size // pjmediartcpfbcommon doesn't have a 'length' member. // We need to ensure enough data for the header at least if size =...

RHEL 9 : php (RHSA-2023:5926)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5926 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: XML loading external entity witho...

PHP < 8.0.28, 8.1.x < 8.1.16, 8.2.x < 8.2.3 Security Update - Windows

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

Nginx Plus < R24 P1 1-Byte Memory Overwrite RCE

According to its self reported version, the installed version of Nginx Plus prior to R24 P1. It is, therefore, affected by a remote code execution vulnerability. A security issue in nginx resolver was identified, which might allow an unauthenticated remote attacker to cause 1-byte memory overwrit...

Huawei EulerOS: Security Advisory for libxcursor (EulerOS-SA-2018-1437)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libXcursor (EulerOS-SA-2019-1191)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1000221

pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...

CVE-2019-11579

dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHOOPTSOVERLOADED...

CVE-2019-11579

CVE-2019-11579 affects the dhcpcd DHCP client (dhcpcd) before 7.2.1. It is caused by a 1-byte read overflow in the DHO_OPTSOVERLOADED handling in dhcp.c. The documented remediation is to upgrade to version 7.2.1 or apply vendor patches that address this issue.

CVE-2019-11579

dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHOOPTSOVERLOADED...

EulerOS Virtualization 2.5.4 : libXcursor (EulerOS-SA-2019-1191)

According to the version of the libXcursor package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libxcursor: 1-byte heap-based overflow in XcursorThemeInherits function in library.c CVE-2015-9262 Note that Tenable Network...

EulerOS 2.0 SP2 : libxcursor (EulerOS-SA-2018-1437)

According to the version of the libxcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libxcursor: 1-byte heap-based overflow in XcursorThemeInherits function in library.c CVE-2015-9262 Note that Tenable Network Security has...