massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: qat – added parameter checks for RSA. Requests with a source buffer size greater than the size of the key are rejected. This prevents potential integer underflow issues that might occur when copying the source scatterlist...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: misc: fastrpc: Fix for copy buffer page size For non-registered buffers, the fastrpc driver copies the buffer and passes it to the remote subsystem. There is a problem with the current implementation of page size calculation, ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: In virtiobt, there is a issue where skbPutskb, len is called before proper validation of len. len comes directly from virtqueuegetbuf, without any validation against the buffer that is posted to the device. The RX skb ...

kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000

A flaw was found in the Linux kernel's afalg cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length,...

ROS-20261005-73-0008

The vulnerability in rsync is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the gdi_Bitmap_Decompress() function in the libfreerdp/gdi/graphics.c file of the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gdiBitmapDecompress function in the libfreerdp/gdi/graphics.c file of the RDP client FreeRDP is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

CVE-2026-64747

CVE-2026-64747 — Pilote noyau AppleAVE2 : format filaire + PoC d'atteignabilité Analyse de cause racine et preuve de concept d'atteignabilité macOS pour CVE-2026-64747, un débordement de tampon dans l'extension noyau de l'encodeur vidéo AppleAVE2 com.apple.driver.AppleAVE2 corrigé dans macOS 26.6...

Siemens SIMATIC S7-1500 CPU 1518 MFP Incorrect Calculation of Buffer Size (CVE-2026-43501)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506010; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2026-47578

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect buffer size calculation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

EUVD-2026-90125

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect buffer size calculation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

ROS-20260930-73-0144

The vulnerability in the drivers/net/ethernet/google/gve/gveethtool.c and drivers/net/ethernet/google/gve/gvemain.c modules of the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-47578: Incorrect Calculation of Buffer Size

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect buffer size calculation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

The vulnerabilities of the functions amdgpu_ib_get_value() and amdgpu_ib_set_value() in the drivers/gpu/drm/amd/amdgpu/amdgpu_ring.h module of the Linux kernel allow an attacker to gain access to protected information or cause a service failure.

The vulnerabilities of the functions amdgpuibgetvalue and amdgpuibsetvalue in the drivers/gpu/drm/amd/amdgpu/amdgpuring.h module of the Linux operating system are related to incorrect calculation of buffer sizes. Exploiting these vulnerabilities can allow attackers to access protected information...

CVE-2026-95509

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...

CVE-2026-95509 Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...

CVE-2026-95509

The Qt for MCUs framework is vulnerable to an out-of-bounds read due to an incorrect buffer size calculation during String.arg() formatting. This issue specifically affects strings optimized for Latin-1 characters when displaying Latin-1 characters. The vulnerability can result in an out-of-bound...

CVE-2026-95509: Out-of-bounds Read

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...

CVE-2026-18414 Out-of-bounds write in the ADI MAX32 ADC driver due to incorrect adc_sequence buffer size validation

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...

ROS-20260928-73-0118

The vulnerability of the functions ah6outputdone and ah6output in the Linux kernel’s net/ipv6/ah6.c file is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...