16030 matches found
SUSE CVE-2026-89817
In the Linux kernel, the following vulnerability has been resolved: drm/gud: NUL-terminate TV mode names read from the device gudconnectoraddtvmode reads a buffer of fixed-size mode names from the USB device and passes pointers into it to drmmodecreatetvpropertieslegacy, which calls strlen on eac...
SUSE CVE-2026-91959
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious BINDACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...
CVE-2026-25294
CVE-2026-25294 is a buffer over-read in Qualcomm WLAN Firmware that causes a transient denial of service while parsing a frame during channel usage. The adjacent-network attack vector (CVSS 3.1: 7.4 HIGH , AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) indicates an attacker on an adjacent network can trigg...
CVE-2026-25294 Buffer Over-read in WLAN Firmware
Transient DOS while parsing frame during channel usage...
CVE-2026-25294 Buffer Over-read in WLAN Firmware
Transient DOS while parsing frame during channel usage...
CVE-2026-25284 Buffer Over-read in OOBM
Information Disclosure when a pointer is reused after being deallocated...
CVE-2026-25284
CVE-2026-25284 is a buffer over-read in Qualcomm's OOBM component, caused by a pointer being reused after being deallocated . This leads to Information Disclosure with a CVSS 3.1 score of 7.3 (HIGH) , exploitable via a local vector with low privileges and changed scope . No in-the-wild exploitati...
CVE-2026-25284 Buffer Over-read in OOBM
Information Disclosure when a pointer is reused after being deallocated...
CVE-2026-25275
CVE-2026-25275 is a buffer over-read in Qualcomm WLAN Firmware that results in a transient denial of service when the firmware processes authentication frames containing invalid FILS (Fast Initial Link Setup) information element header lengths . The vulnerability is network-exploitable with no pr...
CVE-2026-25275 Buffer Over-read in WLAN Firmware
Transient DOS when processing authentication frames with invalid FILS information element header lengths...
CVE-2026-25275 Buffer Over-read in WLAN Firmware
Transient DOS when processing authentication frames with invalid FILS information element header lengths...
CVE-2026-24081 Buffer Over-read in BT Controller
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled...
CVE-2026-24081 Buffer Over-read in BT Controller
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled...
CVE-2026-24081
CVE-2026-24081 is a buffer over-read in the Qualcomm Bluetooth (BT) Controller that causes a transient denial of service when processing a channel map with insufficient used channels while adaptive frequency hopping is fully enabled. The vulnerability requires no privileges or user interaction, o...
CVE-2026-24075 Buffer Over-read in Qualcomm IPC
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions...
CVE-2026-24075 Buffer Over-read in Qualcomm IPC
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions...
CVE-2026-24075
CVE-2026-24075 is a buffer over-read (memory corruption) vulnerability in Qualcomm's IPC (inter-process communication) subsystem. The root cause is improper synchronization and race conditions that occur when multiple threads issue concurrent IOCTL requests to the device control handler. The vuln...
CVE-2026-24081: Buffer Over-read
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled...
CVE-2026-24075: Buffer Over-read
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions...