A PUF-Based Security Framework for Fault and Intrusion Detection

Industrial Control Systems ICS rely on sensor feedback to keep safety-critical processes within operational limits. This research presents a hardware-root-of-trust that embeds a Physically Unclonable Function PUF at the measurement layer to authenticate sensor readings. The architecture combines...

Avahi security vulnerability

Avahi is a set of open-source local service discovery tools for Linux. Versions of Avahi 0.9rc2 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the sending of mDNS responses that included recursive CNAME records, which could lead to segmentation violations and...

thrift-c_glib:fuzz_parse_compact: Segv on unknown address in g_int64_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5403895039066112 Project: thrift-cglib Fuzzing Engine: afl Fuzz Target: fuzzparsecompact Job Type: aflasanthrift-cglib Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gint64hash libglib-2.0.so.0 containersread...

OESA-2026-1204 harfbuzz security update

HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in...

OSV-2026-119 Segv on unknown address in gpsd_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477658237 Crash type: Segv on unknown address Crash state: gpsdpoll FuzzDrivers.c...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004830 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls...

PT-2026-5587

Name of the Vulnerable Software and Affected Versions live555 affected versions not specified Description A flaw exists in the rgaufman/live555 fork of live555 that could allow a remote attacker to trigger a segmentation fault within the increaseBufferTo function. Successful exploitation of this...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004909)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004909 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vt8623fb: Check the size of screen before memsetio In the function vt8623fbsetpar,...

gpsd:FuzzDrivers: Segv on unknown address in gpsd_poll

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=5331927017259008 Project: gpsd Fuzzing Engine: afl Fuzz Target: FuzzDrivers Job Type: aflasangpsd Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gpsdpoll FuzzDrivers.c...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42160)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42160 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in...

CVE-2025-11743

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...

CVE-2025-11743

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...

CVE-2025-14027

Multiple denial-of-service vulnerabilities exist in the affected product. These issues can be triggered through various crafted inputs, including malformed Class 3 messages, memory leak conditions, and other resource exhaustion scenarios. Exploitation may cause the device to become unresponsive...

CVE-2025-11743 Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...

CVE-2025-11743

CVE-2025-11743 describes a denial-of-service vulnerability in Rockwell Automation CompactLogix 5370 where a malformed CIP forward open message can cause a major nonrecoverable fault requiring a restart. Public documents identify the affected product family and the DoS impact, with a CVSS-like sco...

MiracleLinux 8 : lua-5.3.4-12.el8 (AXSA:2021-2619:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2619:01 advisory. lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370 Tenable has extracted the preceding description block directly from the...

PT-2026-3560

Name of the Vulnerable Software and Affected Versions versions prior to 2.3 Description Multiple denial-of-service issues exist that can be triggered through crafted inputs, including malformed Class 3 messages, memory leak conditions, and resource exhaustion scenarios. Exploitation may cause the...

CVE-2025-11743: Improper Validation of Specified Quantity in Input

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...

PT-2026-3559

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...

MiracleLinux 8 : libsndfile-1.0.28-16.el8_10 (AXSA:2024-9429:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9429:03 advisory. libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 Tenable has extracted the preceding description block directly fro...