690 matches found
CVE-2026-63939
CVE-2026-63939 (Linux kernel, KVM SEV): The issue concerns computation of the maximum length for the in-GHCB scratch area in the GHCB shared buffer. Previously, KVM assumed the input length (@len) always represented the maximum required size for MMIO emulation; for PSC requests, @len is only the ...
The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor allows a hacker to trigger a service failure.
The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the asn1_decode_snmp() function in the printing server’s CUPS implementation allows a attacker to disclose protected information or cause service failures.
The vulnerability of the asn1DecodeSnmp function in the CUPS printing server is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...
CVE-2026-20156
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
EUVD-2026-44717
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-20156
CVE-2026-20156 affects Cisco RoomOS . The issue is described as improper restriction of operations within the bounds of a memory buffer (CWE-119), leading to potential memory corruption. Cisco’s security advisory and related sources indicate a software hardening release that addresses these vulne...
kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...
The vulnerabilities of the modheaders and mod_mime modules in the Apache HTTP Server allow attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of the modheaders and modmime modules in the Apache HTTP Server relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of ImageMagick’s PSD format file processor allows attackers to compromise the confidentiality of the protected information.
The vulnerability of ImageMagick’s PSD format file processor relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of the protected information...
ROS-20260706-73-0006
The vulnerability of the pgrestoreattributestats function in the PostgreSQL database management system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by this function...
ROS-20260702-73-0004
The vulnerability of the DCBATTRBCN function in Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
CVE-2026-53171
A flaw was found in the Linux kernel's accel/ethosu driver. The dmalength function, responsible for calculating Direct Memory Access DMA region usage, contains several arithmetic issues. These issues, including potential underflows and overflows during calculations, can lead to an under-reporting...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
SMBGhost Scanner — CVE-2020-0796 SMBv3 vulnerability scanner...
CVE-2026-45195
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware for more privileged memory accesses...
The vulnerability of the br_nd_send() function in the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the brndsend function in the Linux operating system is related to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and accessibility of protected information...
The vulnerability of the function drm_dp_get_adjust_request_post_cursor() in the drivers/gpu/drm/drm_dp_helper.c module of Linux kernel allows a hacker to gain unauthorized access to protected information or cause service failure.
The vulnerability of the drmdpgetadjustrequestpostcursor function in the drivers/gpu/drm/drmdphelper.c module of Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: IMA: Verify that the IMA buffer from the previous kernel is within the addressable RAM. Patch series “Address page fault in imarestoremeasurementlist”, version 3. When the second-stage kernel is booted using kexec with a limiting...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: APEI/GHES: ARM processor Error: Do not go beyond the allocated memory If the BIOS generates a very small ARM Processor Error, or an incomplete one, the current logic will fail to deferrence err-sectionlength and ctxinfo-size...
The vulnerability of the strchr() function in the Squid proxy server allows a hacker to gain unauthorized access to protected information.
The vulnerability of the strchr function in the Squid proxy server is related to the escape from memory buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...