33747 matches found
CVE-2026-62291 libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...
CVE-2026-62291
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...
CVE-2026-72298
A flaw was found in the Linux kernel's qrtr network component. On 32-bit systems, a 32-bit integer overflow can occur in the qrtrendpointpost function when processing an incoming packet. This overflow can bypass a size validation check, leading to an out-of-bounds write and causing the kernel to...
CVE-2026-72252
A flaw was found in the Linux kernel. A memory allocation failure during network filter operations can lead to an inconsistent state within the netfilter: nftsetpipapo module. This inconsistency can result in out-of-bounds writes, which may allow a local attacker to cause a system crash denial of...
CVE-2026-67271
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a speciall...
CVE-2026-72226
A flaw was found in the Linux kernel's batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced module. An integer overflow can occur when calculating the length of a Translation Table Type-Length-Value TVLV unicast message. This overflow can lead to invalid safety checks, allowing an...
CVE-2026-67271
Dell PowerStore SDNAS has an out-of-bounds write in its SMB/CIFS handler. An unauthenticated remote attacker can send a crafted SMB packet to trigger a persistent crash (DoS) or achieve remote code execution (CVSS 9.8 Critical, no auth required). No in-the-wild exploitation is documented. Dell ad...
EUVD-2026-61049
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a...
CVE-2026-67271
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a speciall...
CVE-2026-67271
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a speciall...
CVE-2026-72217
A flaw was found in the Linux kernel's SUNRPC component. The xdrbuftobvec function performs an out-of-bounds write when processing client-supplied RPC Remote Procedure Call payload sizes without proper boundary checks. A remote attacker could exploit this by crafting malicious RPC requests, leadi...
CVE-2026-72197
A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS image. This manipulation causes an incorrect calculation of memory movement length, leading to an out-of-bounds write operation. The primary...
CVE-2026-72196
A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker could craft a malicious NTFS file system image that, when mounted, would cause a malformed log record header LRH to trigger an out-of-bounds write during log replay. This memory corruption could lead to a system...
kernel: dlm: validate length in dlm_search_rsb_tree
A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...
kernel: dlm: validate length in dlm_search_rsb_tree
A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...
CVE-2026-62357 DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...
CVE-2026-62357 DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...
CVE-2026-72192
A flaw was found in the Linux kernel's ntfs3 module. A local unprivileged attacker can exploit this vulnerability by mounting a specially crafted NTFS image and performing a file creation operation. This can lead to a controlled out-of-bounds write, a type of memory corruption. This memory...
CVE-2026-72191
A flaw was found in the Linux kernel's ntfs3 driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS filesystem image. This can lead to an integer underflow during a memory copy operation, resulting in an out-of-bounds kernel write. Successful exploitation...
