290 matches found
CVE-2021-27965
CVE-2021-27965 Proof of concept for CVE-2021-27965 Stack-based Buffer Overflow NOTE: I probably will not update this any further there is still a chance I will finish it. I currently have the ability to cleanly overwrite the instruction pointer, but I believe that this is enough to prove I have t...
CVE-2026-91041
Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...
EUVD-2026-104999
Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...
Astra Linux – Vulnerability in hdf5
HDF5 versions 1.14.3 and earlier contain a buffer overflow vulnerability in H5Olinfodecode, which leads to corruption of the instruction pointer and causes denial of service or potential code execution...
PT-2026-94525
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem regarding atomic Read-Modify-Write RMW verification. The system only records the instruction pointer type when the destination...
Linux Kernel Security Vulnerabilities
The Linux kernel is the kernel used by the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a processing error in NextRIP within KVM nSVM. This vulnerability may lead to the use of...
PT-2026-41554
VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return address to execute...
Exploit-Dev-Lab-Vulnserver-TRUN
Buffer Overflow Exploitation — Vulnserver TRUN Ty...
JLSEC-2026-305
HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...
JLSEC-2026-316
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...
JLSEC-2026-302
HDF5 Library through 1.14.3 has a SEGV in H5Aclose in H5Aint.c, resulting in the corruption of the instruction pointer...
JLSEC-2026-322
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Olayoutencode in H5Olayout.c, resulting in the corruption of the instruction pointer...
JLSEC-2026-315
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting in the corruption of the instruction pointer...
JLSEC-2026-313
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tgetnativetype in H5Tnative.c, resulting in the corruption of the instruction pointer...
PT-2026-39361
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F addr decode len in H5Fint.c, resulting in the corruption of the instruction pointer...
PT-2026-39362
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG read in H5HG.c called from H5VL native blob get in H5VLnative blob.c, resulting in the corruption of the instruction pointer...
PT-2026-39350
HDF5 Library through 1.14.3 has a SEGV in H5A close in H5Aint.c, resulting in the corruption of the instruction pointer...
PT-2026-39359
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T get native type in H5Tnative.c, resulting in the corruption of the instruction pointer...
PT-2026-39365
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T ref mem setnull in H5Tref.c called from H5T conv ref in H5Tconv.c, resulting in the corruption of the instruction pointer...