CVE-2026-45258

creationtimestamp| type| source ---|---|--- 2026-06-27 10:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpba5c52vm27...

CVE-2026-45258

dspmmapsingle validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could overflow, so that a large offset and length wrapped around and passed the check. The offset was then narrowed from 64 to 32 bits when converted to ...

CVE-2026-45258 Multiple vulnerabilities in the sound(4) mmap path

dspmmapsingle validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could overflow, so that a large offset and length wrapped around and passed the check. The offset was then narrowed from 64 to 32 bits when converted to ...

CVE-2026-45258

The FreeBSD sound(4) driver contains a memory-safety vulnerability in the dsp_mmap_single() function. A lack of proper overflow checking when summing user-supplied offset and length values allows these values to wrap around, passing validation. Subsequently, narrowing the offset from 64 to 32 bit...