CVE-2026-24826

creationtimestamp| type| source ---|---|--- 2026-01-27 12:15:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdfqeubejd2c...

CVE-2026-24826

CVE-2026-24826 describes multiple flaws (out-of-bounds write, divide-by-zero, NULL pointer dereference, use of uninitialized resource, out-of-bounds read, reachable assertion) in cadaver turso3d. The connected sources consistently identify cadaver turso3d as affected and assign a CRITICAL CVSS v4...

CVE-2026-24826

Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reachable Assertion vulnerability in cadaver turso3d.This issue affects...

Azure Linux 3.0 Security Update: exiv2 (CVE-2024-24826)

The version of exiv2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24826 advisory. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of...

Linux Distros Unpatched Vulnerability : CVE-2020-24826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the elf::section::asstrtab function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a...

CVE-2025-24826

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...

CVE-2023-24826

RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send crafted frames to the device to trigger the usage of an uninitialized object leading to denial of service. This issu...

CVE-2024-24826 affecting package exiv2 for versions less than 0.28.3-1

CVE-2024-24826 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2024-24826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in...

CVE-2025-24826

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...

CVE-2025-24826

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...

CVE-2025-24826

CVE-2025-24826 affects Acronis Snap Deploy (Windows) , with vulnerable component defined as the installation/build prior to 4625. The root cause is insecure folder permissions leading to a local privilege escalation . The CVSS data indicates a local attack vector with high impact on confidentiali...

CVE-2025-24826

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...

CVE-2023-24826

creationtimestamp| type| source ---|---|--- 2025-01-10 17:03:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1165...

Medium: exiv2

Issue Overview: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0, so Exiv2 versions...

CVE-2024-24826

creationtimestamp| type| source ---|---|--- 2024-02-13 00:26:15+00:00| seen| https://t.me/ctinow/183524 2024-02-15 06:26:49+00:00| seen| https://t.me/ctinow/185264 2025-12-29 21:01:14+00:00| seen| https://github.blog/security/vulnerability-research/bugs-that-survive-the-heat-of-continuous-fuzzing...

CVE-2024-24826

Summary (CVE-2024-24826): Exiv2, a C++ library for image metadata, contains an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder, affecting v0.28.1 (v0.28.0 introduced the vulnerable function). Reading metadata from a crafted video can crash the program. Versions before 0.28 are not affected...

CVE-2024-24826 Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0, so Exiv2 versions before v0.28 are no...

CVE-2023-24826 Usage of Uninitialized Timer during forwarding of Fragments with SFR

RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send crafted frames to the device to trigger the usage of an uninitialized object leading to denial of service. This issu...

CVE-2023-24826 Usage of Uninitialized Timer during forwarding of Fragments with SFR

RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send crafted frames to the device to trigger the usage of an uninitialized object leading to denial of service. This issu...