CVE-2026-92238 Ambiguous parsing of mail headers

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

clr

CLR C 검사기 L 생명주기 및 기타 R 정제 타입 Zig를 위한 동영상: https://www.youtube.com/watch?v=mf0WzTOe-40 후원: https://buymeacoffee.com/dnautics HN에서 토론: https://news.ycombinator.com/item?id=42923829 Lobsters에서 토론: https://lobste.rs/s/9sitsj/clrcheckerforlifetimesother 라이브 데모 동영상:...

xmloxide

xmloxide libxml2의 순수 Rust 재구현 — 오픈 소스 세계에서 사실상 표준인 XML/HTML 파싱 라이브러리입니다. libxml2는 2025년 12월에 알려진 보안 문제로 인해 공식적으로 유지보수가 중단되었습니다. xmloxide는 동일한 적합성 테스트 스위트를 통과하는 메모리 안전하고 고성능인 대체제를 목표로 합니다. Features 메모리 안전 — 공개 API에 unsafe가 전혀 없는 아레나 기반 트리 규격 준수 — W3C XML 적합성 테스트 스위트 100% 통과 1727/1727 해당 테스트 오류 복구 ...

kernel-c-to-rust-spike

Kernel C-to-Rust hardening spike: UVC descriptor parser Can a security-critical Linux kernel C parser be hardened by rewriting it in Rust, with the rewrite shown equivalent to the original and then formally verified? This spike runs the full loop on one target: the UVC video descriptor parser...

nano-analyzer

Nano-analyzer AISLE의 간결한 LLM 기반 제로데이 취약점 스캐너입니다. 시연 목적의 연구 프로토타입입니다. 실제 제로데이 취약점을 탐지할 수 있는 단일 파일 기반의 간단한 도구입니다. C/C++ 메모리 안전 버그에 편향된 프로토타입이며, 오탐지를 발생시킬 수 있습니다. 공개 연구의 정신에 따라 있는 그대로 공유합니다 — 날카로운 모서리가 있을 수 있습니다. 기능 Nano-analyzer는 소스 코드를 세 단계 LLM 파이프라인에 전송하는 단일 파일 Python 스캐너입니다: 1. Context generatio...

Astra Linux – Vulnerability in Firefox

Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs in Firefox 95. Some of these bugs exhibited signs of memory corruption, and we believe that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tracing: Fixed an out-of-bounds write in traceseqtobuffer. This bug was reported by syzbot: BUG: KASAN: Out-of-bounds access in traceseqtobuffer in kernel/trace/trace.c:1830 inline BUG: KASAN: Out-of-bounds access in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: fixed a slab-out-of-bounds read in hfsplusuni2asc BUG: KASAN: slab-out-of-bounds in hfsplusuni2asc+0xa71/0xb90 fs/hfsplus/unicode.c:186 Read of size 2 at addr ffff8880289ef218 by task syz.6.248/14290 CPU: 0 UID: 0 PID...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 145 and Thunderbird 145. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 146 and Thunderbird...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevents stack overflow in mlxbfi2csmbusstarttransaction The memcpy function is called in a loop, without checking the upper bound of 'operation-length', and 'dataidx' is also incremented...

Astra Linux – Vulnerability in Firefox

A memory safety bug has been fixed in Firefox 152. This vulnerability was addressed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 114. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 115...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message Use the string machinery provided by the tracing subsystem to create a copy of the string literals used in the “nested VM-Enter failed” tracepoint. A complete...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfs: Do not wander off the end of a directory data block This fix adds sanity checks for xfsdir2dataunused and xfsdir2dataentry to ensure that the pointer does not go beyond the valid memory region. Before the patch, the loop...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fbdisplayi-mode to NULL when the mode is released. Recently, we discovered the following issue through syzkaller: BUG: KASAN: Slab-use-after-free in fbmodeisequal+0x285/0x2f0 A read of size 4 at address ff11000001b3c69...

Astra Linux – Vulnerability in Firefox and Thunderbird

When accessing throttled streams, the number of available bytes that need to be checked in the calling function must be within limits. This may cause future code to be incorrect and vulnerable. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

Astra Linux – Vulnerability in Firefox and Thunderbird

Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 105 and Firefox ESR 102.3. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code...

CVE-2015-8710

再現ツール Mike Dalessio、Francois Chagnon、Florian Weingarten、Jun Kokatsu に感謝します。 BZ 746048 を参照してください。 Linux でのビルド root@kitploit: $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...

mlkem-native

mlkem-native mlkem-native は、ML-KEM1 の安全で高速かつ移植性に優れた C902 実装です。 これは ML-KEM リファレンス実装3 のフォークです。 mlkem/src/ および mlkem/src/fips202/ 内のすべての C コードは、CBMC4 を用いてメモリ安全性（メモリオーバーフローなし）と型安全性（整数オーバーフローなし）が証明されています。すべての AArch64 および x8664 アセンブリは、HOL-Light5 を用いて、機能的に正しく、メモリ安全であり、秘密情報に依存しないタイミング（定数時間）であることが証明されています...

EUVD-2026-76467

In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS. Later, elfvaliditycachesecstrings and elfvaliditycacheindexstr acce...