CVE-2026-18842

CVE-2026-18842 is an out-of-bounds write vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker to gain elevated privileges . The CVSS 3.1 score is 8.4 (HIGH) with a local attack vector requiring no privileges or user interaction, resulting in high impact to confi...

CVE-2026-18842 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write...

CVE-2026-17195 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-17195

CVE-2026-17195 is an out-of-bounds write vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker with low privileges to cause a denial of service . The CVSS 3.1 score is 6.5 (Medium) with a changed scope, reflecting the local attack vector and high availability imp...

CVE-2026-17003

CVE-2026-17003 is an out-of-bounds write vulnerability in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 that allows a remote, unauthenticated attacker to compromise system confidentiality and integrity . The NVD rates it CVSS 9.1 (CRITICAL) with a network vector, low complexity, and no privileges ...

CVE-2026-17003 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write...

CVE-2026-16958 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-16958

CVE-2026-16958 affects IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 . A remote attacker can trigger an out-of-bounds write leading to denial of service . NVD scores it 7.5 (HIGH) with a network attack vector, while IBM's CNA assessment rates it 6.5 (MEDIUM) with an adjacent network vector. No in-...

CVE-2026-43798

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...

CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

CVE-2026-77642

Tor before 0.4.9.9 is vulnerable to an out-of-bounds write triggered when parsing a consensus or detached signature containing an unexpected signature digest type. The flaw can lead to a denial of service for directory authorities , potentially disrupting the Tor network, while the impact remains...

CVE-2026-43798

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...

CVE-2026-43798

CVE-2026-43798 affects swift-nio-ssh , the SSH implementation in Apple's Swift NIO networking library. A single crafted SSH message allows an unauthenticated network attacker to trigger an out-of-bounds stack write with attacker-controlled length and content, potentially affecting any application...

AZL-96909 CVE-2026-63388 affecting package libtevent 0.14.1-1

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

DEBIAN-CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

AZL-96918 CVE-2026-63387 affecting package libtevent 0.14.1-1

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdnsserverrequestformatresponse. The final-label check...

AZL-97563 CVE-2026-63388 affecting package ntp 4.2.8p17-2

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

AZL-96956 CVE-2026-63388 affecting package libevent 2.1.12-1

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...