CVE-2026-25290

Memory Corruption when validating large data buffers from external sources using addition to check buffer length...

EUVD-2026-81332

Memory Corruption when validating large data buffers from external sources using addition to check buffer length...

CVE-2026-25290

CVE-2026-25290 is an Integer Overflow or Wraparound vulnerability in Qualcomm OOBM (Out-of-Bounds Memory). The root cause lies in memory corruption when validating large data buffers from external sources, where an addition operation is used to check buffer length, allowing an integer overflow to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The validation of the request buffer size was added in smb2allocaterspbuf. The response buffer should be allocated in smb2allocaterspbuf before validation of the request. However, fields within the payload as well as the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Buffer validation was corrected by including the size of the null-terminating character in the EA length. The smb2setea function, which handles Extended Attributes EA, conducted buffer validation checks that incorrectly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: smb: client: Added a check for nextbuffer in receiveencryptedstandard. Added a check on the return values of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereferencing...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: ath11k: Fixed corruption of SKBs in the REO destination ring. While running traffic for a long time, a RX descriptor filled with the value “0” from the REO destination ring is occasionally received. This invalid descript...

CVE-2026-23788

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver due to improper buffer size validation leads to kernel memory corruption and a system crash...

EUVD-2026-77152

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver due to improper buffer size validation leads to kernel memory corruption and a system crash...

CVE-2026-23788

A heap overflow in the Exynos DRM HDR driver of Samsung Mobile Processors Exynos 1280, 2200, and 1380 (DPU) can lead to kernel memory corruption and a system crash . The root cause is improper buffer size validation. The CVSS 3.1 score is 4.2 (MEDIUM) , reflecting a local attack vector with high ...

CVE-2026-90559 snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress

snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompressByteBuffer, ByteBuffer because destination buffer capacity is never validated against decompressed size. Attackers can supply valid compressed data that decompresses larger than the destination buffer,...

PT-2026-90719

snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompressByteBuffer, ByteBuffer because destination buffer capacity is never validated against decompressed size. Attackers can supply valid compressed data that decompresses larger than the destination buffer,...

CVE-2026-89632

A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious server could exploit this vulnerability by sending specially crafted data, leading to an out-of-bounds read. This occurs because the reparsebufptr function reads data before properly validating the buffer size,...

CVE-2026-85228

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library DJL from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload. To...

CVE-2026-85228 Integer overflow in tensor buffer validation in Deep Java Library

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library DJL from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload. To...

CVE-2026-87824

zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths. Attackers can trigger out-of-bounds memory access by providing crafted sample length arrays that cause...

DEBIAN-CVE-2026-87824

zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths. Attackers can trigger out-of-bounds memory access by providing crafted sample length arrays that cause...

CVE-2026-87824

zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths. Attackers can trigger out-of-bounds memory access by providing crafted sample length arrays that cause...

UBUNTU-CVE-2026-87824

zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths. Attackers can trigger out-of-bounds memory access by providing crafted sample length arrays that cause...

CVE-2026-87824

zstd-jni (Java binding for the zstd compression library) versions 1.3.3-1 through 1.5.7-13 contain an out-of-bounds read vulnerability in the Zstd.trainFromBufferDirect method. The root cause is a failure to validate the samples buffer capacity in the native implementation (jni_zdict.c): an attac...