CVE-2026-111379

FreeRDP versions before 3.32.0 are vulnerable to a heap buffer overflow within the persistent_cache_read_entry_v3 function. A local attacker can corrupt memory by providing a crafted v3 persistent cache file containing large width and height values. These values cause an integer wrap in the size ...

Linux Distros Unpatched Vulnerability : CVE-2026-111379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv3 that allows local attackers to corrupt memory by supplying a...

MiracleLinux 8 : mod_auth_openidc:2.3 (AXSA:2026-2061:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2061:01 advisory. modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsing CVE-2026-54789 cjose: cjose: Heap buffer overflow in AES Key Wr...

MiracleLinux 9 : libsoup-2.72.0-16.el9_8.8 (AXSA:2026-2067:14)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2067:14 advisory. libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during...

Linux Distros Unpatched Vulnerability : CVE-2026-111381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv2 that allows local attackers to corrupt heap memory via integer...

CVE-2026-46471

A vulnerability exists in GStreamer gst-plugins-good before version 1.28.2 . While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may perform an out-of-bounds read past the end of a heap-allocated buffer. This occurs when processing custom metadata, potentially allowing an a...

Red Hat: CVE-2026-111381: freerdp: freerdp: Arbitrary code execution via crafted persistent cache file

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that causes...

Linux Distros Unpatched Vulnerability : CVE-2026-46471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the...

MiracleLinux 9 : librabbitmq-0.11.0-7.el9_8.1 (AXSA:2026-2068:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2068:02 advisory. rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 Tenable has extracted the preceding description block directly from...

CVE-2025-55640

GPAC MP4Box v2.4 is vulnerable to a heap buffer overflow in the stbl_AddSize function located in isomedia/stbl_write.c. An attacker can trigger a Denial of Service (DoS) by providing a specially crafted MP4 file. Remediation and specific exploit details are not provided in the documents.

EUVD-2025-211111

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-116125

🚨 CVE-2025-55640 A heap buffer overflow in the stbl AddSize function isomedia/stbl write.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file. 🎖@cveNotify...

Red Hat: CVE-2026-105959: spice-server: spice: Heap buffer overflow via GLZ dictionary max_encoders integer truncation

A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a sizet allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted maxencoders...

CVE-2025-55640

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

AlmaLinux 10 : libsoup3 (ALSA-2026:83618)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83618 advisory. libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding CVE-2026-102555 libsoup: libsoup: Heap buffer overflow from...

Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS

The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux driver power supply core Heap Buffer Overflow DoS

The vulnerability in the drivers/power/supply/powersupplycore.c component of the Linux operating system is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux kernel fib_rules_dump Heap Buffer Overflow

The vulnerability of the fibrulesdump function in the include/net/fibrules.h component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the hdachdmisetpinportmux function in the sound/soc/codecs/hdachdmi.c component of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

Linux snd_seq_read() Heap Buffer Overflow

The vulnerability of the sndseqread function in the sound/core/seq/seqclientmgr.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...