Linux kernel srpt_get_desc_tbl Heap Buffer Overflow

The vulnerability of the srptgetdesctbl function in the drivers/infiniband/ulp/srpt/ibsrpt.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux Distros Unpatched Vulnerability : CVE-2026-111381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv2 that allows local attackers to corrupt heap memory via integer...

CVE-2025-55640

GPAC MP4Box v2.4 is vulnerable to a heap buffer overflow in the stbl_AddSize function located in isomedia/stbl_write.c. An attacker can trigger a Denial of Service (DoS) by providing a specially crafted MP4 file. Remediation and specific exploit details are not provided in the documents.

nginx 0.9.x < 1.30.4 / 1.31.x < 1.31.3 Heap-based Buffer Overflow

According to its Sever response header, the installed version of nginx is 0.9.x prior to 1.30.4 or 1.31.x prior to 1.31.3. It is, therefore, affected by the following issue : - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string...

SUSE SLES15 Security Update : iperf (SUSE-SU-2026:4678-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4678-1 advisory. - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2026-46471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the...

Linux Distros Unpatched Vulnerability : CVE-2026-110758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace,...

Linux Distros Unpatched Vulnerability : CVE-2026-111379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv3 that allows local attackers to corrupt memory by supplying a...

MiracleLinux 9 : librabbitmq-0.11.0-7.el9_8.1 (AXSA:2026-2068:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2068:02 advisory. rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 Tenable has extracted the preceding description block directly from...

AlmaLinux 10 : libsoup3 (ALSA-2026:83618)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83618 advisory. libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding CVE-2026-102555 libsoup: libsoup: Heap buffer overflow from...

MiracleLinux 9 : libsoup-2.72.0-16.el9_8.8 (AXSA:2026-2067:14)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2067:14 advisory. libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during...

EUVD-2025-211111

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-116125

🚨 CVE-2025-55640 A heap buffer overflow in the stbl AddSize function isomedia/stbl write.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file. 🎖@cveNotify...

Red Hat: CVE-2026-105959: spice-server: spice: Heap buffer overflow via GLZ dictionary max_encoders integer truncation

A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a sizet allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted maxencoders...

CVE-2025-55640

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS

The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux driver power supply core Heap Buffer Overflow DoS

The vulnerability in the drivers/power/supply/powersupplycore.c component of the Linux operating system is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux kernel fib_rules_dump Heap Buffer Overflow

The vulnerability of the fibrulesdump function in the include/net/fibrules.h component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the hdachdmisetpinportmux function in the sound/soc/codecs/hdachdmi.c component of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

Linux snd_seq_read() Heap Buffer Overflow

The vulnerability of the sndseqread function in the sound/core/seq/seqclientmgr.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...