CVE-2026-115485

A flaw in the iscsiuio component of open-iscsi allows an attacker on the same network segment to trigger a heap out-of-bounds read and a 1-byte heap overwrite . The issue occurs because the DHCPv6 option parser calls strlen() on raw network data without verifying the presence of a NUL terminator....

CVE-2026-115485 Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31705)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2getea EA alignment smb2getea applies 4-byte alignment padding via memset after writing each EA entry. The bounds check on buffreelen is performed before the value memcpy, but the alignment...

CLEANSTART-2026-EK48712 DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression...

CLEANSTART-2026-QO62654 DOS / potential heap overwrite in mkv demuxing using bzip decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using bzip decompression...

CLEANSTART-2026-SR74236 DOS / potential heap overwrite in qtdemux using zlib decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in qtdemux using zlib decompression...

CLEANSTART-2026-VZ54058 DOS / potential heap overwrite in mkv demuxing using zlib decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using zlib decompression...

CLEANSTART-2026-ZL40658 Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files...

CLEANSTART-2026-MO53582 DOS / potential heap overwrite in mkv demuxing using lzo decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using lzo decompression...

CLEANSTART-2026-YZ53862 Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files

Security vulnerability affects the gst-plugins-good package. Integer overflow in matroskademux element in gstmatroskademuxaddwvpkheader function which allows a heap overwrite while parsing matroska files...

PT-2026-122284

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression...

PT-2026-122350

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using bzip decompression...

PT-2026-122360

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in qtdemux using zlib decompression...

PT-2026-122377

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using zlib decompression...

PT-2026-122331

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using lzo decompression...

PT-2026-122395

Security vulnerability affects the gst-plugins-good package. Integer overflow in matroskademux element in gst matroska demux add wvpk header function which allows a heap overwrite while parsing matroska files...

PT-2026-122397

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gst avi demux invert function which allows a heap overwrite while parsing avi files...

diagspill

DiagSpill — Linux kernel SCTP sockdiag heap overflow tracking site Source for the DiagSpill patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP peer transport-count overflow in the Linux kernel CVE-2026-74469, an unprivileged local-user path to a...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-debuginfo / etc (crlsa-2024_2302)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242302 advisory. gstreamer-plugins-base: heap overwrite in subtitle parsing CVE-2023-37328 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-debuginfo / etc (crlsa-2024_3088)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243088 advisory. gstreamer-plugins-base: heap overwrite in subtitle parsing CVE-2023-37328 Tenable has extracted the preceding description block directly from the CIQ security...