PT-2026-35061

Name of the Vulnerable Software and Affected Versions uuid versions prior to 14.0.0 Description The software used for creating RFC9562 formerly RFC4122 UUIDs contains an issue where v3, v5, and v6 accept external output buffers but fail to reject out-of-range writes, such as those involving a sma...

BACnet Stack 缓冲区错误漏洞

BACnet Stack is an open-source protocol stack for BACnet, designed for use in embedded systems, Linux, MacOS, BSD, and Windows. Versions prior to BACnet Stack 1.4.3 contained a buffer error vulnerability. This vulnerability stems from a out-of-bounds read vulnerability in the decoder of the...

Microsoft Windows Encrypting File System 缓冲区错误漏洞

Microsoft Windows Encrypting File System is a feature introduced by Microsoft’s Windows operating system in NTFS 3.0. It provides file system-level encryption. There is a buffer error vulnerability in Microsoft Windows Encrypting File System EFS. Attackers can exploit this vulnerability to gain...

Microsoft Windows GDI 缓冲区错误漏洞

Microsoft Windows GDI is a core underlying standard interface in the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows GDI...

Microsoft Windows GDI 缓冲区错误漏洞

Microsoft Windows GDI is a core underlying standard interface within the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows...

HPESBHF05040 rev.1 - Certain HPE SimpliVity Servers Using Certain AMD EPYC Processors, AMD-SB-3016: IOMMU Write Buffer Vulnerability, Loss of Confidential Guest Integrity Vulnerability

Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen11 - Prior to SimpliVity Gen11 Support Pack v20260116 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20585 |...

Adobe InDesign Desktop 缓冲区错误漏洞

Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. Adobe InDesign Desktop suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

openFPGALoader 缓冲区错误漏洞

openFPGALoader is a general-purpose FPGA programming tool developed by Gwenhael Goavec-Merou. Versions of openFPGALoader prior to 1.1.1 contained a buffer error vulnerability. This vulnerability stems from a heap buffer overflow during the execution of the BitParser::parseHeader function, which m...

discount 缓冲区错误漏洞

Discount is a Markdown language parsing and conversion tool developed by Orc developers. Versions of Discount from 1.3.1.1 to 2.2.7.4 contained a buffer error vulnerability. This vulnerability stemmed from a signed length truncation error, which could lead to out-of-bounds reads and process crash...

ZLMediaKit 缓冲区错误漏洞

ZLMediaKit is an open-source advanced streaming service framework based on C++ 11, developed by ZLMediaKit in China. ZLMediaKit has a buffer error vulnerability, which stems from the lack of buffer boundary validation in the VP9 RTP parser, potentially leading to a heap buffer overflow...

Electron 缓冲区错误漏洞

Electron is an open-source JavaScript framework developed by users for creating cross-platform desktop applications. This framework is based on Node.js and Chromium, allowing the development of cross-platform desktop applications using HTML and CSS. Versions of Electron prior to 38.8.6, 39.8.1,...

PJSIP 缓冲区错误漏洞

PJSIP is an open-source, free and open-source multimedia communication library developed in C language. It implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Prior to PJSIP 2.17, there was a buffer error vulnerability. This vulnerability stemmed from the VP9 RTP...

CVE-2026-33849

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.This issue affects rapidvms: before PR96...

CVE-2026-4734

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in yoyofr modizer libs/libopenmpt/openmpt-trunk/include/premake/contrib/curl/lib modules. This vulnerability is associated with program files imap.C‎. This issue affects modizer: before v4.3...

ROS-20260324-73-0006

A vulnerability in the ipv6 component of the Linux operating system kernel is related to buffer copying without input data validation. Exploitation of the vulnerability allows an attacker acting remotely to affect confidentiality, integrity and availability of protected information...

F5 NGINX Plus和F5 NGINX Open Source 缓冲区错误漏洞

F5 NGINX Plus and F5 NGINX Open Source are both products of the American company F5. F5 NGINX Plus is a software-based application delivery platform. F5 NGINX Open Source is a high-performance web server, reverse proxy server, load balancer, and API gateway. Both NGINX Open Source and NGINX Plus...

The vulnerabilities of the functions __msc_buffer_win_free() and msc_buffer_get_page() in the driver/hwtracing/intel_th/msu.c module of the Linux kernel’s hardware tracing driver allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions mscbufferwinfree and mscbuffergetpage in the drivers/hwtracing/intelth/msu.c module of the Linux kernel’s hardware tracing driver is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

GStreamer 缓冲区错误漏洞

GStreamer is a set of open-source frameworks for processing streaming media. GStreamer has a buffer error vulnerability, which stems from a lack of validation of the data provided to users during coordinate processing. This vulnerability may lead to out-of-bounds writes and remote code execution...

GStreamer 缓冲区错误漏洞

GStreamer is a set of open-source frameworks for processing streaming media. GStreamer has a buffer error vulnerability, which stems from the lack of validation of user data when handling APS units. This vulnerability may lead to out-of-bounds writes and remote code execution...

Ella Core 缓冲区错误漏洞

Ella Core is an open-source solution developed by Ella Networks for use in private networks as a 5G core network solution. Versions of Ella Core prior to 1.5.1 contained a buffer error vulnerability. This vulnerability stemmed from a kernel crash that occurred when processing PathSwitchRequest...