Astra Linux – Vulnerability in libsdl2

SDL Simple DirectMedia Layer version 2.0.12 has a heap-based buffer over-read issue in the function Blit3or4to3or4inversedrgb in the file video/SDLblitN.c, caused by a malicious .BMP file...

Astra Linux – Vulnerability in openssl1.0

The Raccoon attack exploits a flaw in the TLS specification, which allows an attacker to calculate the pre-master secret in connections that use a Diffie-Hellman DH-based ciphersuite. In such cases, the attacker can eavesdrop on all encrypted communications sent over that TLS connection. The atta...

Astra Linux – Vulnerability in libsdl1.2, libsdl2

In SDL Simple DirectMedia Layer, from versions 1.2.15 onward, as well as in versions 2.x through 2.0.9, there is a heap-based buffer over-read issue in the Map1toN function within the video/SDLpixels.c file...

Astra Linux – Vulnerability in OpenSSL

The function X509VERIFYPARAMadd0policy is documented as implicitly enabling the certificate policy check during certificate verification. However, the implementation of this function does not actually enable the policy check, allowing certificates with invalid or incorrect policies to pass the...

Astra Linux – Vulnerability in libsdl1.2, libsdl2

In SDLLoadWAVRW in the audio/SDLwave.c file, there is an issue of buffer over-reading for versions from 1.2.15 up to 2.x, and further up to 2.0.9...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: l2tp: All race conditions in l2tptunnelregister have been fixed. The code within l2tptunnelregister is problematic in several ways: 1. It modifies the tunnel socket after it is published. 2. It calls setupudptunnelsock on an...

The vulnerability of the do_layer_surface() function in the src/IMG_xcf.c component of the Simple DirectMedia Layer library allows a hacker to induce a service failure.

The vulnerability of the dolayersurface function in the src/IMGxcf.c component of the Simple DirectMedia Layer library is related to reading data beyond the acceptable buffer limits. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created .xcf...

PT-2026-79499

Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description The cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope of inbound messages. The MsgReplicateSync payload is accepted without...

ROS-20260821-73-0058

The vulnerability of the blockwritefullpage function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74343

A flaw was found in the Linux kernel's kernfs component. Multiple superblocks with different namespaces can share the same kernfsnode, leading to a race condition during extended attribute xattr operations. The Virtual File System VFS layer's per-inode locks are insufficient to serialize concurre...

CVE-2026-72852

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

CVE-2026-72852 darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

CVE-2026-72852

hank-ai/darknet (a neural network framework) is affected by an integer overflow in src-lib/convolutional_layer.cpp that leads to a heap buffer overflow . Buffer sizes for convolutional layer weights and outputs are computed using unchecked 32-bit integer arithmetic on fields parsed from a .cfg fi...

EUVD-2026-63536

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

CVE-2026-72852 darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

CVE-2026-72852 darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

Linux Distros Unpatched Vulnerability : CVE-2026-52854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the displaymap parser functi...

PT-2026-79109

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutional layer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.out h l.out w l.out c...

CVE-2026-49424

The Linuxulator (Linux binary compatibility layer) in the FreeBSD kernel contains a vulnerability in the waitid() system call implementation. When translating a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t struct, the system fails to zero the stack structure first. This uninitia...

CVE-2026-52854

Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the displaymap parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the...