906 matches found
CVE-2026-107815 MariaDB: one byte OOB write in DOS tables of the CONNECT engine
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...
CVE-2026-107815 MariaDB: one byte OOB write in DOS tables of the CONNECT engine
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...
TUNderflow
TUNderflow CVE-2026-81000 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your u...
SUSE CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
AZL-106736 CVE-2026-107570 affecting package mutt 2.2.12-1
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
DEBIAN-CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
UBUNTU-CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
EUVD-2026-94853
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-107570
The mutt mail client is vulnerable to a heap out-of-bounds (OOB) write in the convert_file_from_to() function. This issue can be triggered by providing a crafted Content-Type header when an email is being used as a template. The vulnerability is characterized as a Use of Out-of-range Pointer Offs...
CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
PT-2026-107893
Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.4.2-2.1 Description A heap out-of-bounds write occurs in the convert file from to function when an email is used as a template. An attacker can trigger this issue by providing a crafted Content-Type header...
CVE-2026-107570: Use of Out-of-range Pointer Offset
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
Linux Distros Unpatched Vulnerability : CVE-2026-107570
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template. CVE-2026-107570 Note that...
GHSA-V76P-62QX-WWQ2 ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write
Summary When decoding a tiled TIFF with fax compression T4/T6/MH, DecodeTilesChunky allocates each tile buffer from TileWidth ceilTileWidthbpp/8TileLength bytes but constructs the fax decompressor with frame.Width: TiffDecompressorsFactory ignores the isTiled/tileWidth/tileHeight parameters...