800 matches found
CVE-2026-89142
In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-117885
In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-89142
The Wi-Fi NPU FW is vulnerable to an out-of-bounds write caused by an incorrect bounds check . This security flaw could lead to a local denial of service . Exploitation requires user execution privileges , and no user interaction is required. No specific exploit information or remediation steps a...
CVE-2026-89142 Out-of-bounds Write in Wi-Fi NPU
In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-89142: Airoha Technology Corp.: In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check
In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation...
ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-53995 via mlflow (2.16.1)
mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...
PT-2026-116852
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth btnxpuart component within the nxp process fw dump function. When CONFIG DEV COREDUMP is disabled, the hci devcd append function returns an error...
CVE-2026-92155
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its ran...
CVE-2026-92155 F´: FileUplink Unknown Packet Type Assertion DoS
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its ran...
CVE-2026-92155 F´: FileUplink Unknown Packet Type Assertion DoS
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its ran...
CVE-2026-92155 F´: FileUplink Unknown Packet Type Assertion DoS
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its ran...
CVE-2026-92155
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its ran...
EUVD-2026-101313
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its ran...
PT-2026-114337
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::Ccsds::SpacePacketDeframer dataIn handler is vulnerable because the handler treats the minimum packet-length condition as FW ASSERT rather than rejecting...
PT-2026-114341
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its ran...
CVE-2026-92155: Reachable Assertion
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its ran...
SUSE CVE-2026-97915
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...
Intel Xeon Processor FW 2026.3 IPU Security Update
Intel has informed HP of potential vulnerabilities identified in some Intel® Xeon® Processors, which might allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP has...
PT-2026-102920
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw port-forwarding configuration handler and is triggered by the ip subnet and fw ip request parameters during...
SUSE CVE-2026-93789
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGNtlvlen, 4 against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs...