qrv

QRV — QNX Neutrinoベースのオペレーティングシステム、64ビットRISC-V向けに再構想 QRVは、現代の64ビットハードウェア向けに、QNX Neutrino 6.4オペレーティングシステム を根本から適応・再実装したものです。主要アーキテクチャはRISC-V（rv64g）、セカンダリターゲットはx86-64 です。プロジェクトは2020年のクリスマスイブに始まりました。 QRV という名称は、QNXの商標との関連を意図的に避けています。 QRVは、カーネルだけでなく 完全なオペレーティングシステム...

CVE-2026-39113

CVE-2026-39113：SQLite 可选 SQLAR 扩展中的堆缓冲区溢出 执行摘要 CVE-2026-39113 是 SQLite 可选 SQLAR 扩展中的一个堆缓冲区溢出漏洞。在已加载该扩展的应用程序中，能够使用受控的压缩 blob 和大小调用 sqlaruncompress 的攻击者，可以在 LP64 系统上导致 zlib 在堆分配之外写入。这是宿主进程内部的内存安全边界故障；它不是 SQLite 数据库文件解析问题、认证绕过，也不是每个默认 SQLite 部署中均可触及的缺陷。 该漏洞行为于 2026-03-11 由 Git 提交 169f68e（Fossil...

PT-2026-35037

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wl shm buffer objects, or if it...

SUSE SLES15: libwayland-client0 / libwayland-client0-32bit / libwayland-cursor0 / etc (SUSE-SU-2023:1873-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1873-1 advisory. - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486 Tenable has extracted the preceding...

SUSE SLES15: libwayland-client0 / libwayland-client0-32bit / libwayland-cursor0 / etc (SUSE-SU-2023:1874-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1874-1 advisory. - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486 Tenable has extracted the preceding...

CVE-2021-3782

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...

Design/Logic Flaw

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...

CVE-2021-3782

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...

CVE-2021-3782: Integer Overflow or Wraparound

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...