24 matches found
CVE-2026-64527
A flaw was found in the drm/hyperv component of the Linux kernel. The hypervreceivesub function, responsible for processing VMBus packets, does not adequately validate the size of incoming data. This oversight allows a malicious or compromised host to send specially crafted packets, potentially...
CVE-2026-24110
An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Attackers may send overly long addDhcpRules data. When these rules enter the addDhcpRule function and are processed by ret = sscanfpRule, " %d\t%^\t\t%^\n\r\t", &dhcpsIndex, dhcpsIP, dhcpsMac;, the lack of size validation for the rules could...
kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...
CVE-2025-40277
CVE-2025-40277 is a Linux kernel vulnerability affecting the DRM vmwgfx driver. The issue arises from validating the command header size against SVGA_CMD_MAX_DATASIZE, where user-supplied data used in buffer offset calculations could overflow and lead to an out-of-bounds access. Connected sources...
CVE-2025-40277
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...
CVE-2025-9558
CVE-2025-9558 involves an out-of-bounds write in the Zephyr PB-ADV handling. The vulnerability occurs in gen_prov_start() within pb_adv.c, where the full length of received data is copied into link.rx.buf without validating the data size, potentially leading to memory corruption. Affected softwar...
EUVD-2025-199712
There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...
EUVD-2021-16122
Malware in sbrugna...
EUVD-2017-6146
Malware in sbrugna...
Axios is vulnerable to DoS attack through lack of data size check
...
CVE-2023-30770
A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master ADM due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below...
CVE-2023-30770
A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master ADM due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below...
ASUSTOR Data Master 缓冲区错误漏洞
ASUSTOR Data Master is ASUS China's proprietary operating system on the ASUSTOR NAS, featuring a tablet-like graphical interface comparable to a zero-learning curve, allowing people to get started as soon as they use it. A security vulnerability exists in ASUSTOR Data Master versions prior to...
PT-2023-22968 · Asustor · Asustor Data Master
Name of the Vulnerable Software and Affected Versions: ASUSTOR Data Master ADM versions 4.0.6.REG2, 4.1.0 and below ASUSTOR Data Master ADM versions 4.2.0.RE71 and below Description: A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master ADM due to the lack of data size...
SUSE CVE-2021-29646
An issue was discovered in the Linux kernel before 5.11.11. tipcnlretrievekey in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8...
The vulnerability of the SonicOS operating systems lies in the lack of a mechanism to check the size of copied data. This allows attackers to execute arbitrary code or cause service failures.
The vulnerability of the SonicOS operating system is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure by using a specially created malicious request...
An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly validate certain data sizes aka CID-0217ed2848e8.
...
Linux kernel data size validation error vulnerability
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A data size validation error vulnerability exists in tipcnlretrievekey in net/tipc/node.c in Linux kernel versions...