7525 matches found
CVE-2026-71221
A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...
CVE-2026-80755
CVE-2026-80755 affects the Linux kernel SELinux subsystem. The root cause is in perm_read(), which bounds a permission value by SEL_VEC_MAX but never by nprim (the count of permissions for the owning class or common, taken verbatim from the policy image). As a result, security_get_permissions() w...
CVE-2026-80747 drm/amdkfd: Add bounds check for CRAT subtype length
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the advertised subtype length fits. A malformed CRAT table with an oversized...
CVE-2026-80747
CVE-2026-80747 affects the Linux kernel 's drm/amdkfd (AMD KFD) driver. The root cause is a missing bounds check in the CRAT parser : it validates that the subtype header fits within the image but does not verify that the advertised subtype length fits. A malformed CRAT table with an oversized le...
EUVD-2026-70351
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the advertised subtype length fits. A malformed CRAT table with an oversized...
CVE-2026-85084
This vulnerability affects Samsung Open Source TizenFX in the MediaBufferBase indexer setter , where a missing bounds check (Improper Validation of Array Index) leads to an Out-of-bounds Write that can overflow buffers. The CVSS 3.1 score is 6.3 (MEDIUM) with a local attack vector, high complexit...
CVE-2026-85084 Out-of-bounds write in TizenFX MediaBufferBase indexer setter due to missing bounds check
Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers...
SpeculativeExecutionAssessment
SpeculativeExecutionAssessment 시스템이 다음에 설명된 "speculative execution" 취약점에 대해 평가합니다: CVE-2017-5715 branch target injection CVE-2017-5753 bounds check bypass CVE-2017-5754 rogue data cache load 경고: 빌드 옵션에서 "Prefer 32-bit"가 선택되어 있지 않은지 확인하십시오. 상승된 권한이 필요합니다 완화를 위해서는 다음이 필요합니다: 1. 바이러스 백신/보안 제품이 Windo...
kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...
spectre-attack-example
Пример эксплойта Spectre 2 января 2018 г. CVE-2017-5753 и CVE-2017-5715 Пример эксплуатации уязвимости "Spectre" Что это? Мы помещаем текст "The Magic Words are Squeamish Ossifrage." в память, а затем пытаемся прочитать его с помощью эксплойта. Если система уязвима, вы увидите тот же текст в...
lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce
CVE-2026-8836 — lwIP SNMPv3 스택 오버플로우 PoC lwIP의 SNMPv3 USM 핸들러에서 발생하는 치명적인 스택 기반 버퍼 오버플로우인 CVE-2026-8836에 대한 개념 증명 익스플로잇입니다. 취약점 CVE : CVE-2026-8836 CVSS : 9.8 치명적 구성 요소 : snmpparseinboundframe in src/apps/snmp/snmpmsg.c 근본 원인 : snmpasn1decraw의 주석 처리된 경계 검사 및 잘못된 버퍼 크기 매개변수 버퍼 :...
CVE-2026-31694-POC
CVE-2026-31694: Выход за границы записи в кэше readdir FUSE Отсутствие проверки границ в fs/fuse/readdir.c:fuseadddirenttocache. Сервер FUSE возвращает dirent с namelen = 4095, который сериализуется в запись размером 4120 байт. Ядро копирует её на одну страницу кэша страниц размером 4096 байт и...
Linux Distros Unpatched Vulnerability : CVE-2026-80723
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a...
CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder
CVE-2026-11105 – कस्टम Base64 डिकोडर में स्टैक बफर ओवरफ्लो प्रोग्राम कोड C root@kitploit: // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...
CVE-2026-82330 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check
A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...
CVE-2026-80706
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
EUVD-2026-67548
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfscheckrestartarea validates that the $LogFile restart area and its trailing log client record array fit within the system page size: u16 raofs, ralen, caofs; ... ralen =...
CVE-2026-80673
In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfsexternalattrfind When resolving an attribute lookup with a non-zero @lowestvcn, ntfsexternalattrfind peeks at the next $ATTRIBUTELIST entry to decide whether to keep searchin...
CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[]
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...