59 matches found
CVE-2026-46103: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers...
PT-2026-41786
Name of the Vulnerable Software and Affected Versions OpenTelemetry eBPF Instrumentation versions prior to 0.9.0 Description The per-CPU message-buffer fallback path uses a 256-byte backup buffer but preserves the original payload size, which can reach up to 8KB. If a CPU mismatch occurs between...
The vulnerability of the rtsock_msg_buffer() function in the operating system kernel of FreeBSD, which allows a hacker to cause a service failure
The vulnerability of the rtsockmsgbuffer function in the kernel of the FreeBSD operating system is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
CVE-2026-3038 Local DoS and possible privilege escalation via routing sockets
The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not necessarily the case, and it's...
CVE-2026-3038
The rtsock_msg_buffer() function in the FreeBSD kernel contains a stack buffer overflow vulnerability. The flaw occurs because the function fails to validate the source sockaddr length field before copying data into a sockaddr_storage structure on the stack. A malicious userspace program can craf...
CVE-2026-3038 Local DoS and possible privilege escalation via routing sockets
The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not necessarily the case, and it's...
FreeBSD 安全漏洞
FreeBSD is a Unix-like operating system developed by the FreeBSD Foundation. FreeBSD has a security vulnerability that stems from the rtsockmsgbuffer function not verifying the length field of the source sockaddr. This can lead to a stack buffer overflow, potentially causing a kernel crash...
FreeBSD-SA-26:05.route
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:05.route Security Advisory The FreeBSD Project Topic: Local DoS and possible privilege escalation via routing sockets Category: core Module: route Announced:...
FreeBSD Security Advisory - FreeBSD-SA-26:05.route
FreeBSD Security Advisory - The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not...
CVE-2021-47793 Telegram Desktop 2.9.2 - Denial of Service (PoC)
Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...
CVE-2025-66216
AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, a heap buffer overflow vulnerability has been identified in the AIS::Message class of AIS-catcher. This vulnerability allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer. This issue has been...
EUVD-2019-5298
Malware in sbrugna...
EUVD-2017-16850
Malware in sbrugna...
CVE-2025-50054
Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash...
PT-2025-35966
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue exists in the w7090p tuner write serpar and w7090p tuner read serpar functions within the w7090p driver. The issue occurs when the msg parameter,...
PT-2025-35967
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The dib7090p rw on apb function is susceptible to a null pointer dereference. This occurs when the msg parameter, controlled by the user, has a null buf and a zero len value. Insufficien...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the tcpbpfsendmsg function when sk msg is full...
CVE-2024-50694
The SunGrow WiNet-S (also referred to as WiNet-SV200 ) LAN communication module is vulnerable to a stack-based buffer overflow in versions 0.001.00.P027 and earlier. The root cause is a failure to perform bounds checking on the buffer used to store messages when copying timestamps read from MQTT ...
CVE-2024-50694
In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow...
PT-2024-32364 · Unknown · Dhd Msgbuf.C
Name of the Vulnerable Software and Affected Versions: dhd msgbuf.c affected versions not specified Description: The issue is related to a possible out-of-bounds write in the dhd prot flowrings pool release function of dhd msgbuf.c due to a missing bounds check. This could lead to local escalatio...