33890 matches found
PT-2026-107771
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=566549189 Crash type: Heap-buffer-overflow READ 1 Crash state: screen resize cursor window pane resize layout fix panes...
DEBIAN-CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
UBUNTU-CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
EUVD-2026-88015
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...
Critical: Red Hat Security Advisory: unbound security update
An update for unbound is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring Syst...
tmux:layout-fuzzer: Heap-buffer-overflow in screen_resize_cursor
Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=6207824452190208 Project: tmux Fuzzing Engine: afl Fuzz Target: layout-fuzzer Job Type: aflasantmux Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x78852c9e4351 Crash State:...
CVE-2026-96280: Numeric Truncation Error
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
PT-2026-99703
Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux affected versions not specified Description The OCI delta stream parser reads sizes as guint64 but passes them to GLib I/O and allocation functions that expect gsize. On 32-bit systems, gsize is 32 bits, which causes...
SUSE SLES16 Security Update : libsoup (SUSE-SU-2026:23857-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23857-1 advisory. - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap...
RHEL 7 : unbound (RHSA-2026:72199)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72199 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Heap buffer overflow and...
unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...
Critical: Red Hat Security Advisory: unbound security update
An update for unbound is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in Base in Google Chrome prior to version 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted Chrome Extension. Chromium security severity: High...
libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_hbd_fmt_conv_422sp_to_420p
Project: https://android.googlesource.com/platform/external/libhevc https://github.com/ittiam-systems/libhevc.git Detailed Report: https://oss-fuzz.com/testcase?key=6371085587906560 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform I...