Lucene search
+L

7504 matches found

osv_azl
osv_azl
•added 2026/03/16 2:19 p.m.•20 views

AZL-79862 CVE-2026-32775 affecting package libexif for versions less than 0.6.24-2

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS7.2AI score0.0017EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/16 2:19 p.m.•15 views

CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS0.0017EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2026/03/16 2:19 p.m.•22 views

UBUNTU-CVE-2026-3084

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/03/16 2:19 p.m.•18 views

UBUNTU-CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS7.2AI score0.0017EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/03/16 1:59 p.m.•15 views

CVE-2026-32775

A flaw was found in libexif. When decoding MakerNotes, an integer underflow can occur in the exifmnotedatagetvalue function if a zero size is passed. This can lead to a buffer overwrite, potentially allowing an attacker to achieve arbitrary code execution, disclose sensitive information, or cause...

7.8CVSS7.5AI score0.0017EPSS
SaveExploits1References5
Snyk
Snyk
•added 2026/03/16 8:45 a.m.•22 views

Integer Underflow (Wrap or Wraparound)

Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound in the exifmnotedatagetvalue function when a size of 0 is passed as an argument during decoding MakerNotes. An attacker can cause the in-buffer to be overwritten and potentially execute arbitrary cod...

8.6CVSS7.6AI score0.0017EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/16 6:31 a.m.•8 views

CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.4CVSS7.2AI score0.0017EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/16 6:31 a.m.•81 views

CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.4CVSS0.0017EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•7 views

CVE-2026-32775: Integer Underflow (Wrap or Wraparound)

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS7.2AI score0.0017EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/16 12:00 a.m.•25 views

Libexif 数字错误漏洞

Libexif is a function library written in C language by the Libexif organization. This product is primarily used for reading and writing EXIF meta-data from graphic files. Versions of libexif prior to 0.6.25 contained a numerical error vulnerability. This vulnerability stemmed from a flaw in...

7.8CVSS7.4AI score0.0017EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2026/03/16 12:00 a.m.•19 views

(Pwn2Own) VMware ESXi VMCI Integer Underflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware ESXi. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the implementatio...

8.2CVSS6.2AI score0.00461EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•3 views

CVE-2026-3084: Integer Underflow (Wrap or Wraparound)

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/13 8:42 p.m.•11 views

CVE-2026-3084 GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/03/13 8:42 p.m.•24 views

CVE-2026-3084

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0
CVE
CVE
•added 2026/03/13 8:42 p.m.•52 views

CVE-2026-3084

Technical details for CVE-2026-3084 are not publicly provided in the supplied documents. Monitor for updates from Fedora advisories/Nessus plugins and official GStreamer security notices.

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2026/03/13 8:42 p.m.•16 views

CVE-2026-3084 GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.6AI score0.00329EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/03/13 8:42 p.m.•44 views

CVE-2026-3084 GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS0.00329EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/03/13 8:42 p.m.•23 views

Integer Underflow (Wrap or Wraparound)

Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound in the H.266 video bitstream parser in gst-plugins-bad. An attacker can execute arbitrary code by tricking a user into opening a specially crafted H.266 media file. Remediation Upgrade gstreamer to...

8.4CVSS7.7AI score0.00329EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/13 8:42 p.m.•23 views

CVE-2026-3084

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/13 7:54 p.m.•12 views

CVE-2026-29776

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in updatereadcachebitmaporder Function of FreeRDP's Core Library This vulnerability is fixed in 3.24.0...

3.1CVSS0.00294EPSS
SaveExploits0References2
Rows per page
Query Builder