CVE-2020-15999

CVE-2020-15999 Here you will all the resources in order to execute the PoC for the CVE-2020-15999 in Google Chrome and Ftview Ubuntu. There are two folders in this repository, one for each program. Google Chrome In order to reproduce the exploit you will have to install a Google Chrome version...

php-exploit_cve-2022-31630

CVE-2022-31630 – Proof of Concept Exploit Warning: This code is made only for educational purposes and testing in an isolated laboratory environment. Use on other systems without permission is illegal and irresponsible. 📌 Description CVE-2022-31630 is an Out-of-Bounds OOB Read vulnerability in th...

CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33

CVE-2022-31630 - Proof of Concept Exploit for PHP 7.4.33 Warning: This code is created solely for educational purposes and testing in an isolated laboratory environment. Use on other systems without authorization is illegal and irresponsible. 📋 Description CVE-2022-31630 is an Out-of-Bounds OOB...

EUVD-2026-77900

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font file may lead to unexpected...

CVE-2026-84524

CVE-2026-84524 is an out-of-bounds read in Apple's FontParser component, affecting a wide range of Apple platforms including iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 (Apple Watch Series 9 and later)....

CVE-2026-84524

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font file may lead to unexpected...

CVE-2026-84524

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font file may lead to unexpected...

Astra Linux – Vulnerability in Chromium

Integer overflow in PDFium in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted font file. Chromium security severity: High...

PT-2026-91588

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font file may lead to unexpected...

ROS-20260909-73-0156

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause service interruptions using a specially created font file...

SUSE CVE-2026-71394

GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a...

CVE-2026-71393

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An integer overflow can occur when a specially crafted font file is processed on 32-bit systems due to an improper overflow checking. This can cause an undersized heap allocation and subsequently a heap-based buffer overflow,...

CVE-2026-71394

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. The parser can return a structure with uninitialized heap memory when a specially crafted font file is processed due to an improper validation. This can lead to the use of uninitialized heap data, potentially resulting in...

CVE-2026-71393

GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in a...

UBUNTU-CVE-2026-71394

GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a...

CVE-2026-71394

GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a...

Linux Distros Unpatched Vulnerability : CVE-2026-71394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the...

xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow

A flaw was found in the glamorfontget function of the xorg-x11-server. This vulnerability, a heap buffer overflow, occurs when the server processes a specially crafted PCF font file where individual glyph metrics exceed the declared maximum bounds. An authenticated X client can exploit this by...

python-pillow: Pillow: Denial of Service via crafted BDF font file

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical...

python-pillow: Pillow: Denial of Service via crafted BDF font file

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical...