CVE-2026-34620 DNG SDK | Out-of-bounds Write (CWE-787)

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...

CVE-2026-34620

DNG SDK versions 1.7.1 2502 and earlier are vulnerable to an out-of-bounds write (CWE-787) that can corrupt memory, leading to application crash or unresponsiveness (denial-of-service). Exploitation requires local user interaction —a victim must open a malicious file. The CNA-assigned CVSS 3.1 sc...

CVE-2026-81893

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write,...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Esecuzione di codice remoto nel codec immagini Samsung ⚙️ Cos'è Una vulnerabilità critica nella libreria di elaborazione immagini di Samsung libimagecodec.quram.so — utilizzata sui dispositivi Galaxy Android. 🧩 È un difetto di scrittura fuori dai limiti out-of-bounds write...

CVE-2022-32932

CVE-2022-32932 : Out-of-Bounds-Schreibzugriff in ZinComputeProgramUpdateMutables aufgrund eines Double-Fetch-Problems Kommentar des Autors CVE-2022-32932 ist eine weitere Schwachstelle, die ich im ANE-Kernel-Interface entdeckt habe; es handelt sich um ein Double-Fetch-Problem, das zu einem...

CVE-2026-68515

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

CVE-2026-81334 darknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parser

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknetnetwork.cpp as xcallocnet.n, sizeofDarknet::Layer, sized to exactly the number of layer sections the file declares. The shortcu...

CVE-2026-81334

darknet through 6.0 is vulnerable to an out-of-bounds read and write in its .cfg parser. The layer array in src-lib/darknet_network.cpp is sized to the declared number of layer sections, but the shortcut, scale_channels, and sam sections (via their from field) and the route section (via its layer...

CVE-2026-80574

A flaw was found in the Linux kernel's focaltech input driver. This vulnerability occurs in the focaltechprocessrelpacket function, where incorrect handling of input can lead to an array out-of-bounds write. This memory corruption issue could potentially allow an attacker to cause system...

CVE-2026-14677

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

CVE-2026-8053-MongoDB

CVE-2026-8053 — Escrita Fora dos Limites no MongoDB Server Visão geral...

CVE-2022-50999

A flaw was found in Nokogiri. An integer overflow vulnerability in packaged libxml2 buffer handling functions allows a remote attacker to cause out-of-bounds memory writes. By crafting specially designed, large XML files, an attacker can trigger buffer overflows, leading to potential information...

CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write

CVE-2025-5688 – Exploit di scrittura fuori dai limiti in FreeRTOS-Plus-TCP Corruzione di memoria remota / DoS / potenziale attivazione di RCE in FreeRTOS-Plus-TCP durante l'elaborazione di nomi DNS eccessivamente lunghi nelle query LLMNR o mDNS Buffer Allocation Scheme 1. Autore dell'exploit:...

CVE-2026-63388

A flaw was found in Libevent. A heap out-of-bounds write vulnerability in the buffereventsocketsetconnaddress function allows an unauthenticated local peer to achieve arbitrary code execution. By connecting to an AFUNIX listener, an attacker can overwrite critical heap data, leading to memory...

CVE-2026-80584

A flaw was found in the Linux kernel's s390/qeth component. This vulnerability allows a local attacker to trigger an integer underflow when handling user-supplied buffer lengths in the qethsnmpcommand and qethl3arpquery functions. This can lead to an out-of-bounds write, potentially causing memor...

PAN-OS-User-ID-Buffer-Overflow-PoC

🛡️ CVE-2026-0300: Análise de RCE no Portal User-ID™ do PAN-OS Prova de Conceito de Pesquisa: CWE-787 Gravação Fora dos Limites 📌 Visão Geral CVE-2026-0300 é uma vulnerabilidade de estouro de buffer de alta gravidade identificada no Portal de Autenticação User-ID™ Portal Cativo do Palo Alto Network...

CVE-2026-0300-POC

🛡️ CVE-2026-0300: Analisi RCE del Portale User-ID™ PAN-OS Proof-of-Concept di Ricerca: CWE-787 Scrittura Fuori dai Limiti 📌 Panoramica CVE-2026-0300 è una vulnerabilità di buffer overflow ad alta gravità identificata nel Portale di Autenticazione User-ID™ Captive Portal di Palo Alto Networks...

CVE-2026-31431-REVSHELL

root@kitploit: █▀▀ ▄▀█ █ █ █▀█ █▀█ █▀█ ▀█▀ █▀░ █▀█ █ █▄▄ █▀▄ █▄█ █▄█ ░█░ CVE-2026-31431 • Linux Kernel LPE → Root Reverse Shell Visão Geral FailRoot é um exploit armado para CVE-2026-31431 — uma escrita fora dos limites no subsistema crypto: algifaead do kernel Linux. Ele encadeia uma escalada de...

CVE-2026-80569

A flaw was found in the synaptics-rmi4 driver within the Linux kernel. A malicious or malfunctioning RMI4 device can exploit this vulnerability by reporting incorrect electrode counts. This leads to the driver attempting to write data beyond the allocated memory buffer, causing memory corruption...

CVE-2026-31431

CVE-2026-31431: „Copy Fail“ – Lokale Privilegieneskalation im Linux-Kernel 📢 Haftungsausschluss Dieses Repository dient ausschließlich Bildungs- und Cybersicherheitsforschungszwecken. Der Exploit-Code wird analysiert, um die zugrunde liegende Schwachstelle zu verstehen, das Patchen zu erleichtern...