Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.8 contains a heap-buffer-overflow vulnerability through the putepel16fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack using a specially crafted video file...

nginx-map-risk-audit

CVE-2026-42533：NGINX Map 正则表达式风险审查 关于 CVE-2026-42533 的防御性研究笔记，该漏洞是 NGINX 请求处理中的堆缓冲区溢出，与带有正则表达式捕获的 map 指令及某些变量求值模式有关。 用通俗的话说：NGINX 是 Web 服务器和反向代理软件。它通常位于网站和 API 前面，接收 Web 请求并决定将其发送到何处。map 规则是 NGINX 配置的一项功能，表示“如果这个请求值看起来像 X，就将这个变量设为 Y”。正则表达式捕获是从模式匹配中提取出的文本片段。 这个 CVE 之所以重要，是因为某些较旧的 NGINX 版本会错误地处理特定类...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 Prueba de concepto de RCE para CVE-2026-42945 , un desbordamiento crítico de búfer en el montón heap en el ngxhttprewritemodule de NGINX introducido en 2008. Permite la ejecución remota de código no autenticada contra servidores que usan combinaciones de captura rewrit...

postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...

postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead ...

postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

Important: Red Hat Security Advisory: postgresql18 security update

An update for postgresql18 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

Security Bulletin: IBM MQ .NET client is vulnerable to remote code execution (CVE-2026-11728)

Summary IBM MQ has addressed a heap buffer overflow vulnerability in the IBM MQ .NET client's asynchronous message receive handler Vulnerability Details CVEID:CVE-2026-11728 DESCRIPTION: IBM MQ .NET Client could allow a remote attacker to cause a denial of service or potentially execute arbitrary...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - PoC 工具包 一个针对 CVE-2026-42945 （Nginx Rift）的综合概念验证（PoC）工具包，该漏洞是 Nginx ngxhttprewritemodule 模块中的一个严重堆缓冲区溢出漏洞。 漏洞概述...

lab-cve-2023-4863

CVE-2023-4863 — libwebp 漏洞利用实验室 在完全隔离且自动化的 Docker 环境中复现 CVE-2023-4863（libwebp 堆缓冲区溢出）。基于 CEFIRE 的道德黑客模块实践。 本实验室功能 在私有网络中启动八个容器： 容器| 角色 ---|--- attacker| 使用 craft.c 生成 exploit.webp，并通过 HTTP 提供该文件以及一个模拟钓鱼页面 victim-cli| Ubuntu 22.04，带 libwebp 1.2.2-2ubuntu0.22.04.1（有漏洞版本）。自动下载并处理该漏洞利用文件 → 崩溃...

ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.

A flaw was found in FFmpeg, a widely used multimedia framework. This vulnerability, a heap buffer overflow in the VobSub subtitle demuxer, allows a remote attacker to corrupt memory. By providing a specially crafted subtitle file, an attacker can trigger unbounded writes, which could lead to...

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. CVE-2026-63622...

Important: Red Hat Security Advisory: openssl security, bug fix, and enhancement update

An update for openssl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

openssl: heap buffer overflow in CMS key unwrapping

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...

CVE-2026-90556

A flaw was found in Freeciv. This vulnerability, a heap buffer overflow in the worklistload function, occurs when processing specially crafted savegame files. An attacker can create a malicious savegame file that, when loaded by a user or server operator, causes memory corruption. This could lead...

CVE-2026-89266

A flaw was found in stbvorbis, an open-source library for Ogg Vorbis decoding. This vulnerability, a heap buffer overflow, occurs in the startdecoder function due to an integer truncation error when allocating memory for codebook multiplicands. A remote attacker could exploit this by crafting a...

CVE-2026-90783

A flaw was found in MKVToolNix. An attacker can exploit this vulnerability by crafting a malicious AVI Audio Video Interleave file. When the mkvmerge tool processes this file, an integer wraparound in the bundled avilib library's ODML OpenDML superindex parser leads to an undersized memory...

Important: Red Hat Security Advisory: openssl security, bug fix, and enhancement update

An update for openssl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...