CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is processed by Dolby's DDPlus Unified Decoder, an out of bounds write is possible when the evolution data is processed. The decoder writes evolution information into a large, heap-like contiguous buffer contained by a larger struct, and the...

CVE-2026-118769 Botan: Integer overflow when reporting block size in FFI can cause memory corruption

Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botanblockcipherblocksize converted a sizet block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an attacker can select th...

CVE-2026-118769

The Botan C++ cryptography library (versions 2.1.0 through 3.13.0 ) contains an integer overflow vulnerability in the botan_block_cipher_block_size C API function. The function converts a size_t block size to an int without a bounds check. If an application accepts external algorithm parameters a...

CVE-2026-118769 Botan: Integer overflow when reporting block size in FFI can cause memory corruption

Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botanblockcipherblocksize converted a sizet block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an attacker can select th...

CVE-2025-0690

CVE-2025-0690: Integer Overflow Vulnerability in GRUB2 🛡️ Overview CVE-2025-0690 is a critical integer overflow vulnerability in the GRUB2 boot loader, allowing arbitrary code execution and Secure Boot bypass. This flaw affects systems that rely on GRUB2 for secure boot, exposing the system before...

CVE-2026-59346-POC

CVE-2026-59346 — VMXNET3 TSO Integer Overflow VMware Workstation / Fusion Proof-of-concept for a 32-bit integer overflow in the VMXNET3 virtual NIC's TSO segmentation path in vmware-vmx, reachable from a guest VM. This issue is patched. The PoC is published for research and defensive purposes onl...

CVE-2026-88077

Integer overflow or wraparound in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-111735

P-Net before 1.0.3 contains an integer underflow in pfcpmcdataind. When handling a received cyclic data frame while the consumer is in the FRUN or RUN state, the offset of the APDU status was computed as the frame length minus 4 using 16-bit arithmetic, without checking that the frame is long...

EUVD-2026-113009

P-Net before 1.0.3 contains an integer underflow in pfcpmcdataind. When handling a received cyclic data frame while the consumer is in the FRUN or RUN state, the offset of the APDU status was computed as the frame length minus 4 using 16-bit arithmetic, without checking that the frame is long...

CVE-2026-111735

The software P-Net versions prior to 1.0.3 is vulnerable to an integer underflow in the pf_cpm_c_data_ind() function. When the consumer is in the FRUN or RUN state, the system handles received cyclic data frames by computing the APDU status offset as the frame length minus 4 using 16-bit arithmet...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Security Disclosure: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash Assigned CVE ID CVE-2026-66729 Product: facil.io Affected versions: facil.io = 0.6.0 all 0.6.x, all 0.7.x, master; introduced when the MIME parser was added in 0.6.0 Component:...

EUVD-2026-112939

Integer overflow or wraparound in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-88077

An integer overflow or wraparound vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. While the specific component or file is not named in the provided documents, the vulnerability is confirmed to impact the Chromium-based browser...

CVE-2026-116724

FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...

Remote-Integer-Overflow-Vulnerability

Nginx : Remote-Integer-Overflow-Vulnerability This Repository consists of an older yet existing Nginx vulnerability named "Remote Integer Overflow Vulnerability CVE-2017-7529". The Vulnerability is for Older Nginx servers 1.13. Exception is for Nginx 1.12 Set-up : Download sys library and request...

libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation

A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...

CVE-2026-117608

A flaw was found in assimp. An attacker can exploit an integer overflow in the MD2 file parser by providing a specially crafted 3D model file with manipulated header values. When processed, this vulnerability triggers an out-of-bounds memory read, resulting in a Denial of Service DoS through an...

mysql_dos

This tool crashes vulnerable MySQL servers using CVE-2017-3599, a remote integer overflow when parsing login credentials. It can be downloaded here you will need to run it from the command line Usage: mysqldos target port...