CVE-2021-3156-Exp

CVE-2021-3156-Exp استغلال CVE-2021-3156. بعد ليلة من البحث، وأخيرًا، حصلت عليه! شكر https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

Astra Linux – Vulnerability in ffmpeg

There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/vfvmafmotion.c, within the convolutiony8bit module. This vulnerability could allow a remote malicious user to cause a Denial of Service attack...

Astra Linux – Vulnerability in libwebp

A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the GetLE24 function...

Rocky Linux 9 [CIQ] Security Update: qt5-qt3d / qt5-qt3d-debuginfo / qt5-qt3d-debugsource / etc (crlsa-2025_20963)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520963 advisory. assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow CVE-2025-11277 Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: gcc-toolset-14-binutils / gcc-toolset-14-binutils-debuginfo / etc (crlsa-2026_0052)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260052 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 10.1 [CIQ] Security Update: gcc-toolset-15-binutils / gcc-toolset-15-binutils-debuginfo / etc (crlsa-2026_0108)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260108 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-14-binutils / gcc-toolset-14-binutils-debuginfo / etc (crlsa-2026_2627)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20262627 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc (crlsa-2025_23343)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523343 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the CIQ security advisory. Not...

Rocky Linux 8 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc (crlsa-2025_23382)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523382 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the CIQ security advisory. Not...

Rocky Linux 9 [CIQ] Security Update: gcc-toolset-13-binutils / gcc-toolset-13-binutils-debuginfo / etc (crlsa-2025_23336)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523336 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the CIQ security advisory. Not...

Rocky Linux 9 [CIQ] Security Update: qt5-qt3d / qt5-qt3d-debuginfo / qt5-qt3d-debugsource / etc (crlsa-2025_19911)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202519911 advisory. assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow CVE-2025-11277 Tenable has extracted the preceding description block...

Rocky Linux 10.1 [CIQ] Security Update: qt6-qtquick3d / qt6-qtquick3d-debuginfo / qt6-qtquick3d-debugsource / etc (crlsa-2025_22361)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202522361 advisory. assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow CVE-2025-11277 Tenable has extracted the preceding description block...

Rocky Linux 10.1 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc Multiple Vulnerabilities (crlsa-2025_23306)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523306 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11082 binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted...

Rocky Linux 9 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2022_4795)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224795 advisory. rsyslog: Heap-based overflow in TCP syslog server CVE-2022-24903 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 8 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2022_4799)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224799 advisory. rsyslog: Heap-based overflow in TCP syslog server CVE-2022-24903 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9 [CIQ] Security Update: qt5-qt3d / qt5-qt3d-debuginfo / qt5-qt3d-debugsource / etc Multiple Vulnerabilities (crlsa-2025_12842)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202512842 advisory. assimp: Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow CVE-2025-3158 assimp: Open Asset Import Librar...

Rocky Linux 9 [CIQ] Security Update: gcc-toolset-15-binutils / gcc-toolset-15-binutils-debuginfo / etc (crlsa-2026_1359)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20261359 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

UBUNTU-CVE-2026-61721

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loopstart and wsmp.looplength values to samples without calling fluidsamplevalidate or fluidsamplesanitizeloop. A crafted DLS file can place...

CVE-2026-92399 GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow

A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handler. Executing a manipulation of the argument payloadsize can lead to heap-based buffer overflow. It is possible to launch the attack...

EUVD-2026-79134

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...