CVE-2026-85455

MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...

CVE-2026-85444

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted, isBraced, and isChevroned functions that strip whitespace but index using the original string length. Attackers can send NODEREPORT messages with leading or trailing whitespace to read past buffer bounds and access...

CVE-2026-85444 MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted, isBraced, and isChevroned functions that strip whitespace but index using the original string length. Attackers can send NODEREPORT messages with leading or trailing whitespace to read past buffer bounds and access...

CVE-2026-85444 MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted, isBraced, and isChevroned functions that strip whitespace but index using the original string length. Attackers can send NODEREPORT messages with leading or trailing whitespace to read past buffer bounds and access...

CVE-2026-14678

A flaw was found in PostgreSQL. A buffer over-read vulnerability exists in the pgtrgm index picksplit function, which reads past the end of a heap buffer. This could allow a table maintainer to infer limited memory values by observing index split choices, leading to information disclosure...

PT-2026-85293

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A buffer over-read occurs in the isQuoted, isBraced, and isChevroned functions. These functions strip whitespace from input but continue to index using the original string length, allowing an...

PT-2026-85304

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description A buffer over-read occurs in CMOOSCommPkt during the deserialization of a four-byte packet, leading to out-of-bounds memory access. An attacker can exploit this by establishing a TCP connecti...

CVE-2026-18024

A flaw was found in PostgreSQL. A buffer over-read vulnerability in the ascii SQL function allows a user to disclose up to 3 bytes of memory after the end of a specific allocation by providing a specially crafted text value. This could lead to limited information disclosure. Mitigation To mitigat...

EUVD-2026-69709

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84640

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

DEBIAN-CVE-2026-84640

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84640

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84640 One byte overflow read in mail parser

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84640

CVE-2026-84640 is a one-byte buffer over-read in the mail header parser of Mozilla Thunderbird, triggered by a maliciously constructed mail header. The vulnerability is rated CVSS 3.1 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N , indicating a network-exploitable flaw requiring...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

MiracleLinux 9 : nginx:1.26 (AXSA:2026-1722:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1722:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

MiracleLinux 9 : nginx:1.24 (AXSA:2026-1718:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1718:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

Security Vulnerabilities fixed in Thunderbird 155 — Mozilla

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. A maliciously constructed mail header could lead to a one byte read past the end of a buffer. A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID...