2147 matches found
CVE-2026-38752
The BusyBox package (specifically versions less than 1.36.1-26 ) is vulnerable to a stack overflow in the evaluate() function of editors/awk.c (commit 371fe9). An attacker can exploit this by supplying a crafted AWK script to trigger a Denial of Service (DoS) . A patched version of the package is...
CVE-2026-38754
A heap overflow exists in the ifsbreakup() function (located in shell/ash.c ) of Busybox v1.38.0 . An attacker can exploit this vulnerability by supplying crafted input to trigger a Denial of Service (DoS) . Impacted versions include those reported by various distributions; for instance, CBL-Mari...
PT-2026-60302
Name of the Vulnerable Software and Affected Versions BusyBox version 1.38.0 Description A use-after-free issue exists in the awk sub function within the editors/awk.c file. This occurs when the software processes a specially crafted AWK script, which can lead to a Denial of Service DoS...
PT-2026-60314
Name of the Vulnerable Software and Affected Versions Busybox version 1.38.0 Description A heap overflow occurs in the evalcommand function shell/ash.c, which can be triggered by providing crafted input, leading to a Denial of Service DoS. A heap overflow is a memory corruption issue where a...
CVE-2026-38754: Out-of-bounds Read
A heap overflow in the ifsbreakup function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
CVE-2026-38752
A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38755
A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
CVE-2026-38752
A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38754
A heap overflow in the ifsbreakup function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
CVE-2026-38755
A heap overflow exists in the evalcommand() function (located in shell/ash.c ) of Busybox v1.38.0 . This vulnerability allows an attacker to trigger a Denial of Service (DoS) by providing crafted input . While some sources indicate a lack of a vendor-supplied patch, other records suggest that a p...
CVE-2026-38753
A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38753
A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38754
A heap overflow in the ifsbreakup function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
CVE-2026-38755
A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
CVE-2026-38754
A heap overflow in the ifsbreakup function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
CVE-2026-38752
A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38753
A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38753
A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...