24413 matches found
CVE-2026-74452
A flaw was found in the Linux kernel's drm/panthor component. This vulnerability allows a local attacker, by providing a specially crafted firmware, to cause a heap buffer overflow. This occurs because the data size to copy is not validated against the allocated section size, potentially leading ...
CVE-2026-66374
A flaw was found in Knot Resolver. This vulnerability, a heap-based buffer overflow, exists in the DNS-over-QUIC DoQ receive path. A remote attacker could exploit this flaw to achieve remote code execution, allowing them to run arbitrary commands on the affected system...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the setregn function. An attacker can cause a four-byte heap buffer overflow by supplying crafted SH2A FPU bytecode processed through csdisasmiter or csdisasm with specific architecture and mode options,...
SUSE CVE-2026-18917
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the libavformat/rtpencvc2hq.c file. An attacker can achieve memory corruption and potentially execute arbitrary code by supplying a specially crafted Dirac data unit that causes the packetizer to copy...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the hvcC box writer. An attacker can cause a denial of service or achieve arbitrary code execution by supplying a crafted HEVC input file that triggers a heap buffer overflow during muxing. Remediation...
SUSE CVE-2026-72192
In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound tomove in indxinsertintoroot before hdrinserthead indxinsertintoroot promotes a full resident $INDEXROOT into $INDEXALLOCATION and copies all non-last resident root entries into a newly allocated INDEXBUFFER via...
EUVD-2026-63636
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...
EUVD-2026-63675
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-102703)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102703 advisory. A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the chann...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libssh2 (UTSA-2026-102700)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102700 advisory. libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs...
Linux Distros Unpatched Vulnerability : CVE-2026-72854
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet...
Linux Distros Unpatched Vulnerability : CVE-2026-18296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...
CVE-2026-74404
A flaw was found in the Linux kernel's crypto: ccp component. An off-by-one error in the snpfilterreservedmemregions function can lead to a heap buffer overflow. This vulnerability could allow an attacker to corrupt memory, potentially leading to a denial of service or arbitrary code execution...
DEBIAN-CVE-2026-55893
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...
AZL-96894 CVE-2026-55893 affecting package capstone 4.0.2-4
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...
AZL-97416 CVE-2026-55893 affecting package rust for versions less than 1.96.1-1
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...
CVE-2026-18832
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...