174 matches found
PT-2026-61249
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mhz19b receive buf function where serial data chunks are appended to the fixed MHZ19B CMD SIZE receive buffer without verifying if the chunk fits in the remaining...
GHSA-P594-7XW4-G76P Open Babel has out-of-bounds write in CSR PadString (title field)
Summary A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the PadString helper used to handle the CSR title field. A title longer than the fixed destination buffer caused the parser to write past the...
Open Babel has out-of-bounds write in CSR PadString (title field)
Summary A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the PadString helper used to handle the CSR title field. A title longer than the fixed destination buffer caused the parser to write past the...
SUSE CVE-2026-43476
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30i2c: fix buffer size in sps30i2creadmeas sizeofnum evaluates to sizeofsizet 8 bytes on 64-bit instead of the intended be32 element size 4 bytes. Use sizeofmeas to correctly match the buffer element type...
Linux Distros Unpatched Vulnerability : CVE-2026-43476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: chemical: sps30i2c: fix buffer size in sps30i2creadmeas sizeofnum evaluates to sizeofsizet 8 bytes on 64-bit instead of the intended be32 element size 4...
EUVD-2026-30012
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30i2c: fix buffer size in sps30i2creadmeas sizeofnum evaluates to sizeofsizet 8 bytes on 64-bit instead of the intended be32 element size 4 bytes. Use sizeofmeas to correctly match the buffer element type...
UBUNTU-CVE-2026-43476
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30i2c: fix buffer size in sps30i2creadmeas sizeofnum evaluates to sizeofsizet 8 bytes on 64-bit instead of the intended be32 element size 4 bytes. Use sizeofmeas to correctly match the buffer element type...
CVE-2026-43476
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30i2c: fix buffer size in sps30i2creadmeas sizeofnum evaluates to sizeofsizet 8 bytes on 64-bit instead of the intended be32 element size 4 bytes. Use sizeofmeas to correctly match the buffer element type...
Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian Orgs
A previously undocumented threat actor has been attributed to attacks targeting Ukrainian organizations with malware known as CANFAIL. Google Threat Intelligence Group GTIG described the hacking group as possibly affiliated with Russian intelligence services. The threat actor is assessed to have...
Whispering poetry at AI can make it break its own rules
Most of the big AI makers don't like people using their models for unsavory activity. Ask one of the mainstream AI models how to make a bomb or create nerve gas and you'll get the standard "I don't help people do harmful things" response. That has spawned a cat-and-mouse game of people who try to...
Zero-Day Zero: The AI Attack That Just Ended the Era of the Forgiving Internet
Why the Exploit Window Has Collapsed and How CISOs Must Pivot to Survive For decades, cybersecurity was a game of time. We banked on the buffer between a vulnerability’s disclosure and its widespread exploitation. We relied on the forgiving internet, where human attackers needed days or weeks to...
AI as Cyberattacker
From Anthropic: In mid-September 2025, we detected suspicious activity that later investigation determined to be a highly sophisticated espionage campaign. The attackers used AI’s “agentic” capabilities to an unprecedented degree--using AI not just as an advisor, but to execute the cyberattacks...
EUVD-2025-117494
Malicious code in chemical-yellow-gazelle npm...
ROS-20251112-10
Vulnerability in the Open Babel expert system for analyzing chemical data is related to a manipulation in the function ChemKinFormat::ReadReactionQualifierLines of the /src/formats/chemkinformat.cpp file. Exploitation of the vulnerability could allow an attacker to cause a denial of service A...
EUVD-2025-92874
Malicious code in chemicallousez3n npm...
EUVD-2025-77354
Malicious code in chemicalbutterfly-appteadev npm...
EUVD-2025-77355
Malicious code in chemicalbandicoot-toolteadev npm...
EUVD-2025-77353
Malicious code in chemicalstarfish-strongdev npm...