70980 matches found
CVE-2026-80546
CVE-2026-80546 affects the s390/zcrypt subsystem of the Linux kernel, specifically the xcrb_msg_to_type6cprb_msgx() function. Three related input-validation flaws allow a local attacker with low privileges to trigger: (1) integer overflow during CEIL4 alignment, leading to undersized buffer alloc...
CVE-2026-80546 s390/zcrypt: Improve CCA CPRB length and overflow checks
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrbmsgtotype6cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Integer overflow after CEIL4 alignment: Signed int variables could...
CVE-2026-80540 drm/amdgpu: Fix UVD decode image min size calculation
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304...
CVE-2026-80540
CVE-2026-80540 affects the Linux kernel's drm/amdgpu driver , specifically the UVD (Unified Video Decoder) component. The root cause is a faulty minimum-size calculation for decoded images: the code used width instead of pitch , and failed to reject pitch values exceeding 4096, enabling an intege...
CVE-2026-80540 drm/amdgpu: Fix UVD decode image min size calculation
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304...
CVE-2026-79215
A flaw was found in Chromium's WebGL component. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside the sandbox...
CVE-2026-79902
A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...
ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file
A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...
ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file
A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...
ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file
A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...
CVE-2026-79902
A flaw in the Seattle FilmWorks plugin within GIMP allows denial of service when a user opens a specially crafted SFW image file . The root cause is a Variable-Length Array (VLA) allocation on the stack that lacks integer overflow/underflow checks, resulting in an unbounded stack allocation and a...
EUVD-2026-66425
A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
CVE-2026-14662
A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...
CVE-2018-19788
CVE-2018-19788 Sfruttamento del bug PolicyKit CVE-2018-19788 Passaggi per sfruttare il bug PolicyKit su un'installazione CentOS7 completamente aggiornata. root@centos7 groupadd -g 4000000000 cve201819788 root@centos7 useradd -m -c "User With High UID" -u 4000000000 -g 4000000000 -s /bin/bash...
CVE-2024-29050
CVE-2024-29050 CVE-2024-29050 é uma vulnerabilidade de segurança nos serviços criptográficos do Windows, particularmente na forma como os certificados são processados durante operações criptográficas. O problema decorre de um estouro de inteiro, que ocorre quando cálculos em dados como tamanhos d...
llvm-jutsu
llvm-jutsu: Anti-LLM-Verschleierung Dies ist eine 32-Bit-Ganzzahl Das Problem Wir schreiben das Jahr 2025. Du hast Wochen damit verbracht, die perfekte Lizenzprüfung zu bauen. Du hast jedes Mittel aus dem Buch eingesetzt: undurchsichtige Prädikate, Kontrollflussabflachung, MBA-Ausdrücke. Du...
CVE-2017-7308
CVE-2017-7308 CVE-ID: CVE-2017-7308 Veröffentlichungsdatum: 2017-03-29T20:59:00.373 Basis-Score CVSS 3.0/3.1: 7.8 Beschreibung: Die Funktion packetsetring in net/packet/afpacket.c im Linux-Kernel bis 4.10.6 validiert bestimmte Blockgrößendaten nicht ordnungsgemäß, was lokalen Benutzern ermöglicht...