Lucene search
+L

1941 matches found

Cvelist
Cvelist
added 2026/01/07 5:10 p.m.36 views

CVE-2026-21503 iccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to a null pointer passed to memcpy in CIccTagSparseMatrixArray. This issue has been patched in...

6.1CVSS0.00184EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/07 5:10 p.m.39 views

CVE-2026-21503

iccDEV is affected by undefined behavior prior to version 2.3.1.2 due to a null pointer passed to memcpy() in CIccTagSparseMatrixArray. The issue has been patched in version 2.3.1.2. Affected scope: iccDEV library/tooling for ICC color management profiles. Impact is defined as undefined behavior ...

6.1CVSS6.4AI score0.00184EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2026/01/07 12:00 a.m.23 views

iccDEV 安全漏洞

iccDEV is a color configuration codebase open-sourced by the International Color Consortium ICC. A security vulnerability exists in iccDEV versions prior to 2.3.1.2, which stems from undefined behavior caused by passing a null pointer to memcpy in CIccTagSparseMatrixArray...

6.1CVSS6.6AI score0.00184EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.25 views

PT-2026-2069

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. Versions prior to 2.3.1.2 exhibit undefined behavior due to a null pointer...

6.1CVSS6.6AI score0.00184EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.11 views

PT-2026-3761

Name of the Vulnerable Software and Affected Versions glib affected versions not specified Description A flaw exists in glib due to missing validation of offset and count parameters within the g buffered input stream peek function. This can result in an integer overflow during length calculation...

4.2CVSS5.8AI score0.00412EPSS
SaveExploits1References36
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.7 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992714 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy field-spanning write warning in mwifiexcmd80211scanext Replace...

5.5CVSS6.3AI score0.00247EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/30 3:30 p.m.10 views

EUVD-2023-60518

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the...

5.9AI score0.00297EPSS
SaveExploits0References9
NVD
NVD
added 2025/12/30 1:16 p.m.12 views

CVE-2023-54286

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the...

7.6CVSS0.00297EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.8 views

CVE-2023-54286

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the...

7.6CVSS6AI score0.00297EPSS
SaveExploits0References10
OSV
OSV
added 2025/12/30 1:16 p.m.9 views

UBUNTU-CVE-2023-54286

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the...

7.6CVSS5.6AI score0.00297EPSS
SaveExploits0References11
CVE
CVE
added 2025/12/30 12:23 p.m.29 views

CVE-2023-54286

In CVE-2023-54286, the Linux kernel WiFi driver iwlwifi/dvm (sta.c) allowed a TKIP key payload that could exceed the iwl_keyinfo.key buffer due to copying MIC keys along with the TKIP key. The root cause was a field-spanning write during memcpy that could overflow the destination, potentially ena...

7.6CVSS6AI score0.00297EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/12/30 12:23 p.m.37 views

CVE-2023-54286 wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the...

7.6CVSS0.00297EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/30 12:23 p.m.9 views

CVE-2023-54286 wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the...

7.6CVSS6.3AI score
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:00 a.m.6 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992426 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: cp2112: prevent a buffer overflow in cp2112xfer Smatch warnings: drivers/hid/hid-cp2112.c:79...

7.8CVSS6.4AI score0.00205EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/25 12:57 a.m.7 views

SUSE CVE-2023-54039

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939tptxdatnew: fix out-of-bounds memory access In the j1939tptxdatnew function, an out-of-bounds memory access could occur during the memcpy operation if the size of skb-cb is larger than the size of struct...

5.5CVSS6.7AI score0.00187EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/12/25 12:56 a.m.8 views

SUSE CVE-2023-54056

In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIGFORTIFYSOURCE, memcpy will check the size of destination and source buffers. Defining kernelheadersdata as "char" would trip this check. Since these addresses are treate...

7AI score0.00221EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/25 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-54056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kheaders: Use array declaration instead of char Under CONFIGFORTIFYSOURCE, memcpy will check the size of destination and source buffers. Defining...

6AI score0.00221EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/24 3:30 p.m.7 views

EUVD-2023-60270

In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIGFORTIFYSOURCE, memcpy will check the size of destination and source buffers. Defining kernelheadersdata as "char" would trip this check. Since these addresses are treate...

6.4AI score0.00221EPSS
SaveExploits0References8
NVD
NVD
added 2025/12/24 1:16 p.m.10 views

CVE-2023-54056

In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIGFORTIFYSOURCE, memcpy will check the size of destination and source buffers. Defining kernelheadersdata as "char" would trip this check. Since these addresses are treate...

0.00221EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2025/12/24 1:16 p.m.7 views

CVE-2023-54056

In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIGFORTIFYSOURCE, memcpy will check the size of destination and source buffers. Defining kernelheadersdata as "char" would trip this check. Since these addresses are treate...

6AI score0.00221EPSS
SaveExploits0References8
Rows per page
Query Builder