CVE-2026-121997 Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

CVE-2026-121997 Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

CVE-2026-121997

A heap buffer overflow vulnerability exists in the gdbserver 's QTDPsrc packet handler. The flaw arises from a mismatch between a packet's declared source length and its actual data length, which causes the hex2bin function to write beyond the allocated heap buffer. This allows an unauthenticated...

EUVD-2026-117574

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

CVE-2026-121997

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

Linux Distros Unpatched Vulnerability : CVE-2026-121997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process...

Exploit for CVE-2018-17463

CVE-2018-17463 - V8 7.0 / Chrome 70 type-confusion - native c...

Lightstreamer Server 7.4.8 — Unauthenticated JMX `jvmtiAgentLoad` Native Code Ex — Detect

Fingerprint / reachability check for Lightstreamer Server 7.4.8 — Unauthenticated JMX jvmtiAgentLoad Native Code Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lightstreamer Server 7.4.8 — Unauthenticated JMX jvmtiAgentLoad Native Code Execution""" from kittysploit import fr...

CVE-2026-47218

runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...

CVE-2026-47218

The runwasi project contains a vulnerability in containerd-shim-wasmtime-v1 prior to version 0.6.1 . The flaw allows an attacker to provide Wasmtime precompiled bytes directly within an OCI image layer, which the shim incorrectly treats as a trusted artifact from the precompile-cache path. By des...

CVE-2026-47218

runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...

EUVD-2026-102247

runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...

CVE-2026-47218 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox

runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...

CVE-2026-47218 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox

runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...

CVE-2026-47218 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox

runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...

PT-2026-115107

Name of the Vulnerable Software and Affected Versions runwasi versions prior to 0.6.1 Description In containerd-shim-wasmtime-v1, Wasmtime precompiled bytes provided in an OCI image layer can be incorrectly treated as trusted artifacts from the precompile-cache path and deserialized as native cod...

CVE-2026-47218: Deserialization of Untrusted Data

runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...

MAL-2026-17769 Malicious code in deposit-limit-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89565d767d3541470834dc9764af6e4abbe4acb5ba4eb721f7e3008e3a80b1d2 [email protected] is published as a 'Deposit limit frontend utilities' library but its main entry index.js exports an empty object and shi...

Insecure Temporary File Handling

lz4-java is vulnerable to Insecure Temporary File Handling. The vulnerability is due to the way net.jpountz.util.Native.load extracts the native library: it creates a lock file with File.createTempFile and then derives the library path by stripping the .lck suffix, opening the resulting file with...

CVE-2026-106451

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without...