Astra Linux – Vulnerability in Linux 5.10, Linux

A vulnerability was discovered in the Linux kernel before version 5.16.12. In the file drivers/net/usb/sr9700.c, attackers can obtain sensitive information from heap memory by using crafted frame lengths from a device...

EUVD-2026-72779

A buffer overflow in the SBCDecodeFrames function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service DoS via sending a crafted frame...

PT-2026-87075

Name of the Vulnerable Software and Affected Versions Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware versions prior to 5.0 Description A buffer overflow occurs in the SBC DecodeFrames function. This issue allows attackers to cause a Denial of Service DoS by sending a crafted frame. A...

Exploit for CVE-2024-999999

CVE-2024-999999 PoC Proof-of-concept for CVE-2024-999999 hea...

EUVD-2026-52505

An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...

CVE-2026-67978

An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...

PT-2026-67552

Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description An issue in the SBN UDP interface allows attackers to cause a Denial of Service DoS by transmitting a crafted SBN frame. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-67978

The NASA cFS v7.0.1 software contains a vulnerability in its SBN UDP interface . An attacker can cause a Denial of Service (DoS) by transmitting a crafted SBN frame . No specific details regarding the underlying root cause, exploitation evidence, or remediation are provided in the documents.

CVE-2026-67978

An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...

CVE-2026-61893

The CVE-2026-61893 entry concerns the MZ Automation lib60870 library. A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer, indicating an out-of-bounds read in...

CVE-2026-64445

A flaw was found in the rtl8723bs Wi-Fi driver within the Linux kernel. During shared-key authentication, an attacker on an adjacent network could send a specially crafted frame. This could lead to an out-of-bounds read, potentially allowing for the disclosure of sensitive information or causing ...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via THeaderTransport::readString in the header parsing path. An attacker can trigger the flaw by sending a crafted THeader frame with an info-header string length that exceeds the bytes remaining in the header section...

SUSE-SU-2026:22931-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-of-bounds write bsc1269892...

CVE-2026-63869

A flaw was found in the Linux kernel's mac80211 WiFi subsystem. This vulnerability allows an attacker to cause undefined behavior by injecting a specially crafted frame with an invalid radiotap header. This can lead to system instability or a denial of service DoS, potentially causing the system ...

OpenBSD src mpls_do_error function out-of-bounds read vulnerability

OpenBSD src is a base source code package used for building the OpenBSD operating system, containing implementations of the kernel and core components. OpenBSD src has a out-of-bounds read vulnerability. This vulnerability stems from the mplsdoerror function failing to properly handle a specially...

CVE-2026-53430 grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1

Improper Handling of Highly Compressed Data Data Amplification vulnerability in elixir-grpc grpc GRPC.Compressor.Gzip, GRPC.Message modules allows a denial of service via a gzip decompression bomb. This vulnerability is associated with program files lib/grpc/compressor/gzip.ex, lib/grpc/message.e...

CVE-2026-10142

A flaw was found in kafka-python. A malicious broker or a machine-in-the-middle attacker can exploit a denial-of-service vulnerability in the protocol parser. By sending a specially crafted 4-byte frame length value without proper bounds validation, an attacker can trigger excessive memory...

EUVD-2026-36123

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length value without bounds validation. Attackers can send a...

CVE-2026-10142

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length value without bounds validation. Attackers can send a...

UBUNTU-CVE-2026-10142

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length value without bounds validation. Attackers can send a...