33264 matches found
CVE-2026-103680
A heap-based buffer overflow vulnerability exists in the tnef component within the find_free_number() function. The flaw is triggered during the generation of numbered backup suffixes for duplicate filenames. If numbered backups are enabled and file overwriting is disabled, an attacker can provid...
CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...
CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...
CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...
BIT-PHP-MIN-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...
BIT-PHP-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...
BIT-PHP-MIN-2025-14181 Integer overflow to buffer overflow in soap HTTP parsing
The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...
BIT-PHP-2025-14181 Integer overflow to buffer overflow in soap HTTP parsing
The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...
BIT-LIBPHP-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...
BIT-LIBPHP-2025-14181 Integer overflow to buffer overflow in soap HTTP parsing
The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...
CLEANSTART-2024-QA65335 Heap buffer overflow in TabStrip in Google Chrome prior to 89
Security vulnerability affects the chromium package. Heap buffer overflow in TabStrip in Google Chrome prior to 89...
CLEANSTART-2024-XF11910 Heap buffer overflow in WebAudio in Google Chrome prior to 89
Security vulnerability affects the chromium package. Heap buffer overflow in WebAudio in Google Chrome prior to 89...
CLEANSTART-2024-JR38480 Heap buffer overflow in TabStrip in Google Chrome prior to 89
Security vulnerability affects the chromium package. Heap buffer overflow in TabStrip in Google Chrome prior to 89...
CLEANSTART-2024-LX85594 Heap buffer overflow in tab groups in Google Chrome prior to 89
Security vulnerability affects the chromium package. Heap buffer overflow in tab groups in Google Chrome prior to 89...
CLEANSTART-2024-RJ63431 Heap buffer overflow in TabStrip in Google Chrome prior to 89
Security vulnerability affects the chromium package. Heap buffer overflow in TabStrip in Google Chrome prior to 89...
CLEANSTART-2024-MV91691 Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89
Security vulnerability affects the chromium package. Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89...
CLEANSTART-2024-XE83079 Heap buffer overflow in Autofill in Google Chrome on Android prior to 91
Security vulnerability affects the chromium package. Heap buffer overflow in Autofill in Google Chrome on Android prior to 91...
CLEANSTART-2024-JA54223 Heap buffer overflow in WebXR in Google Chrome prior to 91
Security vulnerability affects the chromium package. Heap buffer overflow in WebXR in Google Chrome prior to 91...