CVE-2026-15813

A vulnerability was found in the network packet de-fragmentation engine of kronosnet Version affected = 1.34. The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets...

CVE-2026-52914

A flaw was found in the Linux kernel's batman-adv component. This vulnerability allows a local attacker to cause a denial of service DoS by sending malformed fragment chains. The flaw is due to incorrect accounting of fragment reassembly length, which can be truncated during updates, bypassing...

ALPINE-CVE-2026-33845

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service...

CVE-2026-26203 PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL

PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked...

CVE-2023-43529

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the processing of malicious IPv4 fragments. An attacker can exhaust system memory and CPU resources by sending specially crafted network packets. Remediation Upgrade...

EUVD-2018-1075

Malware in sbrugna...

Zephyr 代码问题漏洞

Zephyr is a small real-time operating system for connected, resource-constrained embedded devices. A null pointer dereference vulnerability exists in Zephyr 2.4.0 and later versions that can be exploited by an attacker to cause a denial of service by sending a malformed IEEE 802154 fragment...