Lucene search
K

45 matches found

OSV
OSV
added 2026/05/26 5:16 p.m.1 views

DEBIAN-CVE-2026-48691

FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP ASPATH attribute encoder. In src/bgpprotocol.hpp, the IPv4UnicastAnnounce::getattributes function computes attributelength as 'sizeofbgpaspathsegmentelementt + this-aspathasns.size sizeofuint32t' and stores it in a...

9.8CVSS6.2AI score0.00055EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.0 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fix potential buffer overflow in i2chidgetreport i2chidxfer is used to read recvlen + sizeofle16 bytes of data into ihid-rawbuf. The former can come from the userspace in the hidraw driver and is only bounded by...

7.8CVSS5.8AI score0.00018EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/04/09 11:25 p.m.1 views

SUSE CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS5.9AI score0.00077EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2026/04/07 11:1 p.m.0 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00077EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/04/07 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-35201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an...

5.9CVSS5.9AI score0.00077EPSS
Exploits1References3
OSV
OSV
added 2026/04/06 8:16 p.m.1 views

DEBIAN-CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS4.8AI score0.00077EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/06 7:49 p.m.1 views

CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00077EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2026/04/06 7:49 p.m.3 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS4.8AI score0.00077EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2026/04/06 7:49 p.m.0 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00077EPSS
Exploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/04/06 7:49 p.m.0 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS7.3AI score0.00077EPSS
Exploits1References1
CVE
CVE
added 2026/04/06 7:49 p.m.43 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown in C (rdiscount). A signed length truncation bug in the default Markdown parse path affects inputs from 1.3.1.1 up to before 2.2.7.4, enabling an out-of-bounds read and potentially crashing the process. The vulnerability arises when input le...

5.9CVSS6AI score0.00077EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2026/04/06 5:53 p.m.0 views

GHSA-6R34-94WQ-JHRC rdiscount has an Out-of-bounds Read

Summary A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process Details In both...

5.9CVSS6AI score0.00077EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.1 views

PT-2026-30724

Name of the Vulnerable Software and Affected Versions Discount versions 1.3.1.1 through 2.2.7.3 Description A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT MAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00077EPSS
Exploits1References14
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.3 views

discount 缓冲区错误漏洞

Discount is a Markdown language parsing and conversion tool developed by Orc developers. Versions of Discount from 1.3.1.1 to 2.2.7.4 contained a buffer error vulnerability. This vulnerability stemmed from a signed length truncation error, which could lead to out-of-bounds reads and process crash...

5.9CVSS7.3AI score0.00077EPSS
Exploits1References2
NVD
NVD
added 2026/04/02 6:16 p.m.0 views

CVE-2026-34610

The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lcx509extractnamesegment casts sizet vlen to uint8t when storing the Common Name CN length. An attacker who crafts a certificate with CN = victim's CN +...

5.9CVSS0.00024EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/02 5:54 p.m.1 views

CVE-2026-34610 leancrypto: Integer truncation in X.509 name parser enables certificate identity impersonation

The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lcx509extractnamesegment casts sizet vlen to uint8t when storing the Common Name CN length. An attacker who crafts a certificate with CN = victim's CN +...

5.9CVSS5.9AI score0.00024EPSS
Exploits0References3
NVD
NVD
added 2026/02/14 5:15 p.m.2 views

CVE-2026-23178

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fix potential buffer overflow in i2chidgetreport i2chidxfer is used to read recvlen + sizeofle16 bytes of data into ihid-rawbuf. The former can come from the userspace in the hidraw driver and is only bounded by...

7.8CVSS0.00018EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2026/02/14 5:15 p.m.1 views

CVE-2026-23178

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fix potential buffer overflow in i2chidgetreport i2chidxfer is used to read recvlen + sizeofle16 bytes of data into ihid-rawbuf. The former can come from the userspace in the hidraw driver and is only bounded by...

7.8CVSS5.9AI score0.00018EPSS
Exploits0References13
OSV
OSV
added 2026/02/14 5:15 p.m.1 views

UBUNTU-CVE-2026-23178

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fix potential buffer overflow in i2chidgetreport i2chidxfer is used to read recvlen + sizeofle16 bytes of data into ihid-rawbuf. The former can come from the userspace in the hidraw driver and is only bounded by...

7.8CVSS5.9AI score0.00018EPSS
Exploits0References14
CVE
CVE
added 2026/02/14 4:27 p.m.8 views

CVE-2026-23178

CVE-2026-23178 — Linux kernel HID i2c-hid buffer overflow . The vulnerability occurs in i2c_hid_get_report() where i2c_hid_xfer reads recv_len + 2 bytes into ihid->rawbuf. recv_len can be as large as HID_MAX_BUFFER_SIZE (16384) and not necessarily bounded by the actual destination buffer, risk...

7.8CVSS5.5AI score0.00018EPSS
Exploits0References5
Rows per page
Query Builder