394837 matches found
CVE-2026-98184 wifi: mwifiex: prevent authentication frame length truncation
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...
EUVD-2026-93112
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...
CVE-2026-98170 smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in movesmb2eatocifs In movesmb2eatocifs, the while srcsize 0 loop condition is insufficient. It allows iteration to continue even if the remaining srcsize is too small to contain a complete...
CVE-2026-98168
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifsqueryreparsepoint In cifsqueryreparsepoint, the start = end check before casting to struct reparsedatabuffer only ensures the start pointer is within the response. It fails to verify...
CVE-2025-9961
CVE-2025-9961 TP-Link AX10/AX1500 CWMP バッファオーバーフロー RCE 概要 CWMP TR-069 におけるスタックバッファオーバーフローにより、リモートコード実行が可能になります。 フィールド| 値 ---|--- 製品| TP-Link AX10, AX1500 影響を受けるバージョン| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC" E -- F"ret2libc" F -- G"system" G --...
CVE-2025-21333
CVE-2025-21333 Hyper-V NT Kernel Integration VSP（vkrnlintvsp.sys）Paged Pool 힙 오버플로 → 로컬 권한 상승（LPE）。 본 디렉토리는 lab용 PoC 소스 코드（MrAle98/CVE-2025-21333-POC 기반, 로컬 패치 포함）。 1. 취약점 요약 항목| 내용 ---|--- CVE| CVE-2025-21333 유형| Heap-based Buffer Overflow 영향| 로컬 권한 상승（EoP）；야생 이용 표시됨 구성 요소| vkrnlintvsp.sys 취약 함수...
CVE-2026-25272
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...
CVE-2026-25274
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization...
CVE-2026-25269
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size...
CVE-2026-25270
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...
CVE-2026-105778
A vulnerability has been found in Tenda AC5 02.03.01.111multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack...
EUVD-2026-92987
A vulnerability has been found in Tenda AC5 02.03.01.111multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack...
OPENSUSE-SU-2026:22023-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 154.0.8037.97 boo1284015 CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103626: Incorrect authorization in FileSystem CVE-2026-103621: Integer overflow in Compositing CVE-2026-103630: Use after free in...
CVE20264893poc
토폴로지: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c 단계 1.vi /etc/dnsmasq.conf port=5353 listen-address=xxx.xxx.xxx.x bind-interfaces no-resolv no-hosts no-poll cache-size=1000 log-queries log-facility=-...
CVE-2026-48095
CVE-2026-48095 7-Zip은 높은 압축률을 제공하는 파일 아카이버입니다. 버전 26.00 이하에는 NTFS 압축 스트림 버퍼의 과소 할당GetCuSize 시프트 UB으로 인한 힙 버퍼 오버플로우 취약점이 존재하며, 공격자가 임의 코드 실행 또는 애플리케이션 크래시를 유발할 수 있습니다. NTFS 핸들러의 CInStream::GetCuSize는 압축 단위 버퍼 크기를 UInt321 = 28 및 CompressionUnit == 4인 조작된 이미지는 지수를 32로 만들어 정의되지 않은 동작을 유발하고 x86/x64에서...
EUVD-2026-92983
Memory Corruption when executing system service routines due to improper handling of user input buffers...
CVE-2026-57546
A Buffer Over-read vulnerability exists in the WLAN HAL component. The flaw occurs during the processing of a continuous receive command when a zero-sized global configuration override is present, leading to a transient Denial of Service (DoS) . No specific software versions or remediation steps ...
CVE-2026-57546 Buffer Over-read in WLAN HAL
Transient DOS when processing a continuous receive command with a zero-sized global configuration override...
