dnsmasq: RRSIG rdlen underflow leading to heap OOB read

A heap out-of-bounds read vulnerability was discovered in dnsmasq's DNSSEC validation. When processing RRSIG records, dnsmasq calculates the signature length by subtracting the fixed field size from the record's declared data length. A crafted RRSIG record with a data length smaller than the fixe...

Important: Red Hat Security Advisory: dnsmasq security, bug fix, and enhancement update

An update for dnsmasq is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-40660

A heap-based out-of-bounds OOB read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information disclosure or application crash...

EUVD-2026-115877

A heap-based out-of-bounds OOB read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information disclosure or application crash...

CVE-2026-40660

A heap-based out-of-bounds OOB read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information disclosure or application crash...

CVE-2026-40660

The AMD Compressonator SDK is affected by a heap-based out-of-bounds (OOB) read vulnerability (CVE-2026-40660 ). An attacker with local access can exploit this flaw to read memory outside the heap boundaries, which may lead to information disclosure or cause an application crash . While the root ...

CVE-2026-40660

A heap-based out-of-bounds OOB read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information disclosure or application crash...

CVE-2026-40660: AMD AMD Compressionator SDK: A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local…

A heap-based out-of-bounds OOB read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information disclosure or application crash...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in issueassocreq and joincmdhdl Two IE parsing loops fail to perform header bounds checks prior to dereferencing pIE-length: - issueassocreq iterates through pmlmeinfo-network.ies to...

CVE-2026-101185

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-101185

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-101185

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-101185

A buffer access with incorrect length value (CWE-805) leads to an OOB read vulnerability in the peripheral module . Exploitation may impact service confidentiality . Technical details regarding the specific affected product, versions, or remediation are not provided in the documents. No exploit i...

EUVD-2026-115081

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-101185: Huawei HarmonyOS: OOB read vulnerability in the peripheral module

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-135349

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2022-1015

CVE-2022-1015 A write-up and Local Privilege Escalation Proof-of-Concept of an OOB read and write vulnerability in the Linux Kernel. You can find the write-up of this vulnerability on my blog and you can find my introduction to nftables here as well. An Important note The exploit provided in this...

CVE-2017-13672

CVE-2017-13672 POCs for CVE-2017-13672 OOB read in VGA Cirrus QEMU driver, causing DoS...

CVE-2026-84118-who-labeled-the-crit-as-a-high

CVE-2026-84118 — SpiderMonkey GC use-after-free Bug 2057457 This is one of those where Mozilla labeled a Critical as a High. So someone might want to go have Firefox update the original bug hunters payment if that's the case. THE TLDR: You can do an OOB R primitive on a controlled pointer and the...

weightBufs

WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support. Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques. The exploit doesn't rely on any hardcoded address or...