64 matches found
CVE-2026-89608
CVE-2026-89608 affects the ecryptfs component of the Linux kernel. The function ecryptfs_parse_packet_set() calculates the remaining packet buffer size from PAGE_SIZE - 8 instead of the actual packet set buffer length, which can overstate the available buffer for version 1 headers . According to ...
EUVD-2026-76520
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...
CVE-2026-89608
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...
EUVD-2026-73895
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...
CVE-2026-78221
An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...
The vulnerability of the get_ext_report() function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the __efi_capsule_setup_info() function in the drivers/firmware/efi/capsule-loader.c file of the Linux kernel’s firmware module allows a hacker to trigger a system failure.
The vulnerability of the eficapsulesetupinfo function in the drivers/firmware/efi/capsule-loader.c file of the Linux kernel firmware module is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the QEMU hardware emulation software, related to incorrect calculation of buffer size, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-80551 s390/vfio_ccw: Ensure first IDAW remains constant
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...
The vulnerability of the efi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the efi component in the Linux operating system’s kernel is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-74657
CVE-2026-74657 affects the Linux kernel IPv4 FIB netlink size calculation. The function fib_nlmsg_size() incorrectly estimates nexthop space by assuming all gateways are encoded as IPv4 RTA_GATEWAY attributes. However, IPv4 routes can carry IPv6 gateways , which are dumped as RTA_VIA by fib_nexth...
Linux Distros Unpatched Vulnerability : CVE-2026-74712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0...
ROS-20260818-73-0007
The vulnerability in freerdp3 is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of DRM/V3D components in Linux operating systems allows a perpetrator to trigger a service failure.
The vulnerability of DRM/V3D components in the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow a hacker to cause service interruptions...
EUVD-2026-59423
In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
The vulnerability of the scarlett2_usb_get_config() function in the sound/usb/mixer_scarlett2.c module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information in Linux operating systems’ USB audio devices.
The vulnerability of the scarlett2usbgetconfig function in the sound/usb/mixerscarlett2.c module, which supports USB audio devices in Linux operating systems, is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the...
PT-2026-55578
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap buffer overflow exists in the Paint Shop Pro PSP file format parser. The issue occurs when the software incorrectly calculates buffer sizes while processing low bit-depth images, which...
The vulnerability of the MIFF encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the MIFF encoder in the console-based ImageMagick graphics editor is related to incorrect calculations of the buffer size allocated. Exploiting this vulnerability can allow an attacker to cause a service failure...