llama-cpp-security-patches

llama.cpp Security Patches Security patches for unpatched vulnerabilities in llama.cpp, discovered by Cyera Research. Background Between July 2025 and June 2026, we reported 10 vulnerabilities to the llama.cpp project through GitHub Security Advisories and MITRE. All advisories were closed by the...

CVE-2026-19199

Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-bit integer overflow in the KM driver during page-to-byte conversion of an allocation size can result in an undersized kernel buffer allocation. This may allow unallocated or...

CVE-2026-74912

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and...

CVE-2026-18629

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handled, the compiler may dereference a NULL pointer at a controlled offset, resulting in a crash of the compiler process. On...

CVE-2021-40346

CVE-2021-40346: HAProxy HTTP Request Smuggling - ACL Bypass Overview This project demonstrates CVE-2021-40346 , a critical integer overflow vulnerability in HAProxy that enables HTTP Request Smuggling attacks to bypass security controls. CVSSv3 Score: 7.5 High Contributors: 1. Boian Eduard 2...

EUVD-2026-113489

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and...

CVE-2026-74912

On GPU systems where the security fix for CVE-2026-49746 has been applied, a new limitation exists regarding the mapping range of graphics buffers. Specifically, integer truncation occurs when mapping GPU buffer pages within the 0GB - 4GB range. This limitation causes errors when attempting to ma...

EUVD-2026-113488

Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-bit integer overflow in the KM driver during page-to-byte conversion of an allocation size can result in an undersized kernel buffer allocation. This may allow unallocated or...

CVE-2026-19199

A 32-bit integer overflow exists in the KM driver during page-to-byte conversion of an allocation size within the GPU DDK (specifically in RGXCreateHWRTDataSet ). This vulnerability allows a non-privileged user to conduct improper system calls to allocate physical memory, resulting in an undersiz...

EUVD-2026-113487

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handled, the compiler may dereference a NULL pointer at a controlled offset, resulting in a crash of the compiler process. On...

CVE-2026-18629

The GPU DDK component, specifically libusc.so , is vulnerable to a Null Pointer Dereference (NPD) during WebGPU shader compilation . The root cause is an integer overflow occurring during the ConvertSwitchToArrayLookup operation when processing unusual GPU shader code from a web page. This overfl...

CVE-2022-0185-POC

CVE-2022-0185 — Proof of Concept A proof-of-concept exploit for CVE-2022-0185 , a heap-based buffer overflow in the Linux kernel's legacyparseparam function fs/fscontext.c. This allows a local unprivileged user to escalate privileges to root. Original exploit by Crusaders of Rust. Full writeup:...

project_BIT_nmap_script

Python program to detect vulnerability with CVE-2022-32073 in large networks This python program runs nmap on an address passed as an argument, by default it runs on all ports but port number can also be given as an argument. It runs nmap with custom created wolfsshversion.nse scripts which uses...

CVE-2026-112922 Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading

A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malicious mesh shading data. Due to improper bounds validation during the processing of indexed color values, Ghostscript...

CVE-2026-112922

A vulnerability exists in Ghostscript where a remote attacker can trigger an out-of-bounds memory read by enticing a user to process a specially crafted PDF or PostScript document. The root cause is an integer overflow of an indexed color index during the processing of mesh shading data, combined...

CVE-2026-112922 Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading

A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malicious mesh shading data. Due to improper bounds validation during the processing of indexed color values, Ghostscript...

EUVD-2026-113473

A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security check for the chunk size is performed before the value is shifted, allowing a specifically crafted 15-digit chunk size ...

DEBIAN-CVE-2026-119268

Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-119268

Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2021-40346

CVE-2021-40346 — HAProxy Integer Overflow leading to HTTP Request Smuggling Vulnerability Summary HAProxy is an open-source reverse proxy and load balancer that handles load distribution and ACL access control rules processing. CVE-2021-40346 is an ACL bypass vulnerability that occurs when HAProx...