CVE-2026-54389

Ghidra (NSA's reverse engineering platform) versions before 12.1.3 are affected by an uncontrolled resource consumption vulnerability in the PDB parser . The AbstractPdb deserialization routine reads all remaining parameters into an unbounded list when processing a crafted PDB file with an oversi...

CVE-2026-54389 Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

CVE-2026-54389 Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

CVE-2026-18832

IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 are affected by a heap-based buffer overflow that allows a remote attacker to execute arbitrary code. The NVD assigns a CVSS 3.1 score of 9.8 (Critical) with a network attack vector, while IBM's CNA scores it 8.8 (High) using an adjacent network vector. ...

CVE-2026-18832 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-17436

IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 are vulnerable to a heap-based buffer overflow that allows a remote attacker to execute arbitrary code . The NVD assigns a CVSS 3.1 score of 9.8 (Critical) with a network attack vector requiring no privileges or user interaction, while IBM's CNA scores...

CVE-2026-17436 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-17060 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read...

CVE-2026-17060

CVE-2026-17060 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where a kernel heap over-read allows a remote attacker to obtain sensitive information and cause a denial of service . The NVD rates this CVSS 9.1 (CRITICAL) with a network vector and no privileges required, while IBM's own scorin...

CVE-2026-17006 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

CVE-2026-17006

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 are vulnerable to a heap buffer overflow that allows a remote attacker to execute arbitrary code. The NVD assigns a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, and no privileges or user interaction required. IBM's CNA ra...

CVE-2026-16951

A heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local authenticated attacker to execute arbitrary code. CVSS 6.7 (MEDIUM) reflects the high privileges required. No exploit or patch details are provided in the documents. The IBM support page (linked in references) sho...

CVE-2026-16951 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-16946

CVE-2026-16946 is a heap buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker with low privileges to gain elevated privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). CISA SSVC assesses exploitation ...

CVE-2026-16946 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buffer overflow...

CVE-2026-16943 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-16943

IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 are affected by a heap-based buffer overflow (CWE-787) exploitable by a local attacker with high privileges to execute arbitrary code (CVSS 8.2 HIGH, scope changed). Fixes are available via AIX SP13/TL-specific service packs and VIOS Fix Packs (4.1.0.50, 4.1....

EUVD-2026-63673

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

CVE-2026-55893

Capstone (a disassembly framework) versions 6.0.0-Alpha9 and earlier contain a heap buffer overflow in the SH architecture disassembler (arch/SH/SHDisassembler.c). The SH floating-point decoders (opFADD, opFMUL, opFSUB) call set_reg() and set_reg_n() using sh_info.op.op_count without bounds-check...

CVE-2026-55893 Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...