CVE-2026-19184 Out-of-bounds write in the NXP GAU ADC driver due to byte-versus-sample buffer size validation mismatch

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

CVE-2026-19184

The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) contains an out-of-bounds write vulnerability due to a mismatch between byte-based buffer size validation and sample-count logic. The driver incorrectly treats a byte count as the number of uint16_t slots, allowing a buffer to be overrun by ...

EUVD-2026-92285

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

HackSysDriverExploits

HackSysDriverExploits...

rewolf-msi-exploit

rewolf-msi-exploit Élévation de privilèges locale MSI NTIOLib/WinIO Plus d'informations disponibles ici : http://blog.rewolf.pl/blog/?p=1630...

OpenSC.tokend

OpenSC.tokend Le pilote de cartes à puce open source pour OS X Un tokend fait apparaître les clés et certificats de votre carte à puce dans Keychain Access.app et les rend disponibles aux applications telles que Safari ou Chrome. OpenSC.tokend est l'implémentation open source de tokend d'OpenSC,...

CVE-2025-63602

CVE-2025-63602 Divulgation de CVE-2025-63602, incluant un PoC pour l'utilisation d'un pilote non sécurisé dans Awesome Miner 11.2.4 menant à une lecture/écriture arbitraire du noyau sur les MSR, résultant en une exécution de code en mode noyau...

CVE-2026-40176-poc

CVE-2026-40176: Preuve de concept d'injection de commande OS Composer Perforce English version Aperçu Ce dépôt est une preuve de concept PoC de la vulnérabilité critique d'injection de commande OS CVE-2026-40176 présente dans le pilote Perforce VCS de Composer. Cette vulnérabilité affecte les...

miniplasma-advisory

MiniPlasma - Avis de protection contre les vulnérabilités Avis technique d'atténuation pour la variante MiniPlasma de CVE-2020-17103 affectant le pilote de mini-filtre Windows Cloud Files cldflt.sys. Rédigé par Rafael França - Architecte en cybersécurité Microsoft CSA, Customer Success Unit CSU...

microsoft-cve-2021-1675

!IMPORTANT "Ce dépôt est maintenant en mode « Blue Screen » : archivé et figé dans le temps !" Microsoft-CVE-2021-1675 J'ai créé un petit projet C qui exploite la vulnérabilité CVE-2021-1675. Pour plus d'informations sur CVE-2021-1675, consultez mon article de blog :...

cve-2025-7771

CVE-2025-7771 — Élévation de privilèges via ThrottleStop.sys Preuve de concept pour CVE-2025-7771. ThrottleStop.sys expose deux gestionnaires IOCTL qui permettent une lecture/écriture arbitraire de la mémoire physique sans aucun contrôle d'accès — tout processus administrateur peut lire ou écrire...

ROS-20261005-73-0154

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-104749

The NXP GAU ADC driver drivers/adc/adc mcux gau adc.c validated the caller-supplied sequence-buffer size, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-results length and used it in mcux gau adc read...

CVE-2026-63277: Inclusion of Functionality from Untrusted Control Sphere

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

ROS-20261005-73-0150

The vulnerability of the irdmacreateuserah function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a attacker to cause a servic...

ROS-20261005-73-0122

The vulnerability of the ucanreadbulkcallback function in the drivers/net/can/usb/ucan.c file of the Linux network device driver framework leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261005-73-0151

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

ALSA-2026:75747 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock CVE-2025-40242 kernel: Linux kernel: Denial of...

OPENSUSE-SU-2026:12061-1 nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-19184: Out-of-bounds Write

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...