198893 matches found
CVE-2026-97399
A flaw was found in glibc. In builds optimized for specific hardware architectures, the string comparison function strncasecmp may read one byte beyond the boundary of the provided input string. An attacker capable of passing controlled strings that end at the edge of a memory page could trigger ...
CVE-2026-98145
A flaw was found in the Linux kernel's AMD XDNA driver. A local user with access to the accelerator device node can trigger a Denial of Service DoS by submitting an empty command chain with a zero command count. Because the driver fails to properly validate the command count, it processes an empt...
CVE-2026-98142
A flaw was found in the Linux kernel's Cirrus video driver. This vulnerability can lead to a Denial of Service DoS due to missing validation of the Base Address Register BAR memory size during device initialization. An attacker capable of attaching a crafted PCI device with an undersized memory...
CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
DEBIAN-CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
AZL-104976 CVE-2026-97399 affecting package glibc 2.38-21
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
UBUNTU-CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
EUVD-2026-88320
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
CVE-2026-93287
A flaw was found in the Linux kernel's I2C System Management Bus SMBus subsystem. A local user can trigger an out-of-bounds memory read by submitting a transfer request with an oversized or invalid block length. This occurs because the kernel does not properly validate user-supplied transfer...
Security update for libheif
This update for libheif fixes the following issues: AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions bsc1281953. Caller-configured security limits not enforced for MINI-box parsing bsc1281952. Heap out-of-bounds read in libheif alpha compositing via mismatched...
SUSE-SU-2026:4378-1 Security update for libheif
This update for libheif fixes the following issues: - AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions bsc1281953. - Caller-configured security limits not enforced for MINI-box parsing bsc1281952. - Heap out-of-bounds read in libheif alpha compositing via...
Security update for redis7
This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2026:4377-1 Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...
Security update for redis7
This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2026:4375-1 Security update for redis7
This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...
Security update for exiv2
This update for exiv2 fixes the following issues: CVE-2026-49275: out of bounds read in CrwMap::decodeBasic bsc1277791. CVE-2026-68546: heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. CVE-2026-68547: heap out-of-bounds write in RemoteIo when reading fro...
SUSE-SU-2026:4374-1 Security update for exiv2
This update for exiv2 fixes the following issues: - CVE-2026-49275: out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. - CVE-2026-68547: heap out-of-bounds write in RemoteIo when readi...
Security update for gnome-shell
This update for gnome-shell fixes the following issue: CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
SUSE-SU-2026:4373-1 Security update for gnome-shell
This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619...