CVE-2026-107635

Dislocker through 0.7.3 contains an integer underflow vulnerability in getvmk and getfvek that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datumsize smaller than the 36-byte AES-CCM header, causing...

CVE-2026-107635

Dislocker versions through 0.7.3 are vulnerable to an integer underflow within the get_vmk() and get_fvek() functions. An attacker can provide a malicious BitLocker volume image with a datum_size smaller than the required 36-byte AES-CCM header, triggering an out-of-bounds heap read via the hexdu...

CVE-2026-107635 Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size Underflow

Dislocker through 0.7.3 contains an integer underflow vulnerability in getvmk and getfvek that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datumsize smaller than the 36-byte AES-CCM header, causing...

EUVD-2026-95022

Dislocker through 0.7.3 contains an integer underflow vulnerability in getvmk and getfvek that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datumsize smaller than the 36-byte AES-CCM header, causing...

kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

Security Bulletin: Vulnerability in aiohttp bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the aiohttp library, which is affected by multiple vulnerabilities, including HTTP request smuggling and out-of-bounds read vulnerabilities. CVE-2026-69243, CVE-2026-69244. Vulnerability Details CVEID:CVE-2026-69243...

CVE-2025-14321

CVE-2025-14321 概念验证 描述 针对 Firefox 中 RTCEncodedFrameBase 组件的释放后使用 UAF 漏洞的概念验证 PoC，该漏洞可通过 WebRTC 编码转换 API 利用。 CVE-2025-14321 : RTCEncodedFrameBase 的析构函数在释放帧的本机内存时未调用 DetachArrayBuffer。因此，JavaScript 的 ArrayBuffer 仍保留指向已释放内存的指针（悬挂指针），允许对 Firefox 内容进程堆进行任意读写。 此 PoC 已在 Mozilla Firefox 145.0.1 和 Windows...

AlmaLinux 9.2 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779190223)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779190223 advisory. - A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side- channel resistant. This iss...

AlmaLinux 9.2 [TuxCare] Security Update: lldpd / lldpd-devel (ALMALINUX9.2:CLSA-2025:1758823952)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758823952 advisory. - In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_0332)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220332 advisory. samba: Out-of-bounds heap read/write vulnerability in VFS module vfsfruit allows code execution CVE-2021-44142 Tenable has extracted the preceding description block...

Rocky Linux 9.6 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-AutoLoader / perl-AutoSplit / etc (ALMALINUX9.6:CLSA-2026:1787646574)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787646574 advisory. - Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in Smeasurestruct...

CentOS Linux 8.4 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-Devel-Peek / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1784304055)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784304055 advisory. - Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular...

AlmaLinux 9.6 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-AutoLoader / perl-AutoSplit / etc (ALMALINUX9.6:CLSA-2026:1787646574)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787646574 advisory. - Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in Smeasurestruct leadi...

CentOS Linux 8 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-Devel-Peek / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1784303431)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1784303431 advisory. - Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular...

CentOS Linux 8.5 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-Devel-Peek / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1784303988)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1784303988 advisory. - Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular...

CentOS Linux 7 [TuxCare] Security Update: perl / perl-CPAN / perl-ExtUtils-CBuilder / perl-ExtUtils-Embed / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1784295411)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1784295411 advisory. - Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expressi...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_64808)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202664808 advisory. kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933...

Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-ugly-free (ALMALINUX9.6:CLSA-2026:1787309460)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787309460 advisory. - Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing...

AlmaLinux 9.6 [TuxCare] Security Update: gstreamer1-plugins-ugly-free (ALMALINUX9.6:CLSA-2026:1787309460)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787309460 advisory. - Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing head...