8877 matches found
CVE-2026-63632
A flaw was found in Open Neural Network Exchange ONNX. An out-of-bounds read can occur in the onnx.versionconverter.convertversion function when processing Gemm nodes with input tensors having fewer than two dimensions. This vulnerability, caused by a lack of rank checking, could allow an attacke...
CVE-2026-81575
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes...
EUVD-2026-66982
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes...
CVE-2026-81575 Missing Sanity Checks for Buffer Lengths
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes...
EUVD-2026-66459
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...
SUSE CVE-2026-80544
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...
PT-2026-82478
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes...
CVE-2026-80544
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...
CVE-2026-80544
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...
CVE-2026-80552
CVE-2026-80552 affects the Linux kernel on s390 architectures, specifically the vfio_ccw driver. When the capability chain was introduced, it correctly clamped region indexes to the capability range but neglected to apply the same bounds check to existing read/write regions , allowing out-of-rang...
CVE-2026-80544 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...
CVE-2026-80544
CVE-2026-80544 affects the Linux kernel s390/zcrypt subsystem, specifically the zcrypt_msgtype6_send_ep11_cprb() function. The vulnerability arises from fragile struct overlays used to read and modify the domain field in the EP11 CPRB payload, which assume a fixed structure without validating the...
EUVD-2026-66560
kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...
CVE-2026-54548 kas: Persistent SSH Host Key Checking Disablement
kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...
CVE-2026-80544: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...
openssl: NULL Dereference in Certificate Verification with OCSP Checking
A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...
openssl: NULL Dereference in Certificate Verification with OCSP Checking
A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...
DEBIAN-CVE-2026-80101
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...
EUVD-2026-66112
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...
CVE-2026-80101
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...