21225 matches found
CVE-2026-90783
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...
CVE-2026-90783 MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...
CVE-2022-0185-Analysis-and-Exploit
CVE-2022-0185-Análisis-y-Exploit Investigación y prueba de concepto para la vulnerabilidad de desbordamiento de montón del kernel Linux CVE-2022-0185. CVE-2022-0185 – Análisis de Desbordamiento de Montón del Kernel Linux Resumen CVE-2022-0185 es una vulnerabilidad de desbordamiento de búfer basad...
ai-vuln-rediscovery-nginx-cve-2026-42945
Redescubrimiento asistido por IA de CVE-2026-42945 en nginx Este repositorio documenta un experimento reproducible de redescubrimiento de vulnerabilidad asistido por IA contra el módulo ngxhttprewritemodule de nginx, posteriormente asociado con CVE-2026-42945. El experimento es intencionalmente...
CVE-2024-12084
CVE-2024-12084 Se encontró una falla de desbordamiento de búfer basada en montón en el demonio rsync. Este problema se debe al manejo inadecuado de longitudes de suma de verificación controladas por el atacante s2length en el código. Cuando MAXDIGESTLEN supera el valor fijo SUMLENGTH 16 bytes, un...
CVE-2023-4911
Vulnerabilidad de desbordamiento del búfer del montón de glibc CVE-2023-4911 Elemento| Contenido ---|--- ID CVE| CVE-2023-4911 Tipo de ataque| Desbordamiento del búfer del montón → Escalada de privilegios local CVSS 3.1| 7.8 Alta Fecha de divulgación| 2023-10-03 Punto vulnerable| Analizador...
Linux Distros Unpatched Vulnerability : CVE-2026-90783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvpx (UTSA-2023-003033)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003033 advisory. Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap...
PT-2026-90858
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...
PT-2026-90944
A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf node get field of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. T...
CVE-2021-3156-Baron-Samedit
CVE-2021-3156 – Baron Samedit Desbordamiento de búfer basado en montículo en sudo | Análisis de explotación y mitigación Resumen CVE-2021-3156, conocido como Baron Samedit , es una vulnerabilidad de desbordamiento de búfer basado en montículo en el programa sudo. Permite que cualquier usuario loc...
CVE-2021-3156
CVE-2021-3156 comprobación de la vulnerabilidad CVE-2021-3156 y script de parcheo Descripción de CVE-2021-3156: Sudo anterior a 1.9.5p2 tiene un Desbordamiento de Búfer basado en Heap, lo que permite la escalada de privilegios a root mediante "sudoedit -s" y un argumento de línea de comandos que...
DEBIAN-CVE-2026-90556
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
CVE-2026-90556
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
UBUNTU-CVE-2026-90556
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
CVE-2026-90556
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
CVE-2026-90556 Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
CVE-2026-90556 Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
CVE-2026-90556
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
EUVD-2026-76901
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...