33906 matches found
PT-2026-72379
In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx insert into buffer indx insert into buffer computes used = used1 - to copy - sp size; memmovede t, Add2Ptrsp, sp size, used - le32 to cpuhdr1-de off; where sp and sp size come from hdr...
Linux Distros Unpatched Vulnerability : CVE-2026-74554
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix out-of-bounds clearbit in ath12kmacdppeercleanup ath12kmacdppeercleanup clears the ML peer ID slot on the freemlpeeridmap bitmap by indexing i...
Linux Distros Unpatched Vulnerability : CVE-2026-72130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches...
PT-2026-72440
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft set pipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nft pipapo match can enter a bad state: - some fields can have their lookup tables resized while others did not - bit...
SUSE CVE-2026-14677
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixe...
SUSE CVE-2026-68124
In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...
MINI-X3VP-C4WR-P4XJ
Bulletin has no description...
CVE-2026-12363
The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...
CVE-2026-12363 Out-of-bounds write in LoRaWAN fragmented transport from a fragment index of 0
The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...
CVE-2026-12363
The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...
CVE-2026-12363 Out-of-bounds write in LoRaWAN fragmented transport from a fragment index of 0
The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...
CVE-2026-19696
A flaw was found in the Ixia IxVeriWave and Vector Informatik BLF file parsers in Wireshark. This issue occurs when malformed packets are decoded from a packet capture file, causing an out-of-bounds write, resulting in a denial of service. Mitigation To mitigate this vulnerability, do not open...
CVE-2026-13196
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...
MINI-C527-3VH2-VQGC
Bulletin has no description...
CVE-2026-13196 Out-of-bounds Write in KUNBUS piControl
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...
EUVD-2026-58672
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...
CVE-2026-13196
Nozomi Networks reports a CWE-787 Out-of-bounds Write in KUNBUS piControl v2.6.2, where a local authenticated attacker with device configuration access can supply crafted configuration data via the piControl character device to write outside the process-image buffer, causing kernel memory corrupt...
CVE-2026-13196
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...
