CVE-2026-68768

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

CVE-2026-68768

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

UBUNTU-CVE-2026-68768

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

CVE-2026-68768 hashcat through 7.1.2 Heap Buffer Overflow in outfile_write() via Oversized Username

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

EUVD-2026-64313

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

CVE-2026-68768 hashcat through 7.1.2 Heap Buffer Overflow in outfile_write() via Oversized Username

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

CVE-2026-68768

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

EUVD-2026-64312

hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZLARGE...

CVE-2026-68767

hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZLARGE...

CVE-2026-77118

A flaw was found in GraphicsMagick. A heap out-of-bounds write vulnerability exists in the Photo CD PCD decoder. A remote attacker could exploit this by providing a specially crafted PCD file. Processing this file can lead to corruption of heap memory, potentially resulting in arbitrary code...

CVE-2026-77642

A flaw was found in Tor. This out-of-bounds write vulnerability occurs when Tor parses a consensus or detached signature with an unexpected signature digest type. A remote attacker could exploit this to cause a denial of service for Tor directory authorities, potentially disrupting the Tor networ...

SUSE CVE-2026-18295

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

SUSE CVE-2026-19582

Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy...

SUSE CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

SUSE CVE-2026-74582

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

PT-2026-79675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPVS estimator kthread 0 where it starts with zeroed chain and tick limits until the initial calculation phase completes. If a network namespace teardown clears...

PT-2026-79568

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfile write function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZ LARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating tha...

PT-2026-79687

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc5 Description An out-of-bounds write issue exists in the ALSA usb-audio component. The data ep set params function calculates the buffer size before accounting for the Format Type II transfer delimiter...

CVE-2026-74670: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and tick limits until its initial calculation phase completes. If network namespace teardown clears ipvs-enable during that phase,...

CVE-2026-74669: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...