4833 matches found
CGA-6835-7PR2-X4GW
Bulletin has no description...
DEBIAN-CVE-2026-64833
FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a coresize value larger than the actual packet length. Attackers can exploit the missing bound...
MINI-VPF4-PMXP-44PJ
Bulletin has no description...
DEBIAN-CVE-2026-64831
FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...
MINI-R5F3-G5FM-4J7X
Bulletin has no description...
MINI-6XMC-8P4G-XCFW
Bulletin has no description...
MINI-325F-HR2H-C92Q
Bulletin has no description...
MINI-6G67-8PQQ-2R34
Bulletin has no description...
MINI-73RW-MG7F-XWX7
Bulletin has no description...
MINI-P45J-2FHG-M3JF
Bulletin has no description...
DEBIAN-CVE-2026-10822
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...
DEBIAN-CVE-2026-55991
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...
DEBIAN-CVE-2026-50248
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered as a possible XFR endpoint. A malicious actor that can spoof the hostname's A/AAAA record no valid RRSIG required becomes the zone'...
DEBIAN-CVE-2026-46582
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...
DEBIAN-CVE-2026-32665
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC DoQ is enabled, the first two bidirectional streams on a new QUIC connection streamid 0 and 4 bypass the per-stream 'quic-size' gate entirely, and large input buffers are allocated later, after only the 2-byte...
MINI-RV47-545G-PG9X
Bulletin has no description...
MINI-2H32-74RC-VWPQ
Bulletin has no description...
MINI-33QF-356Q-PJ3Q
Bulletin has no description...