607 matches found
CVE-2026-8461-EXP
CVE-2026-8461 «PixelSmash» — PoC переполнения кучи в MagicYUV декодере FFmpeg !WARNING Этот репозиторий содержит работающий эксплойт PoC для уязвимости повреждения кучи. Он предназначен исключительно для авторизованных исследований безопасности, CTF-контекстов и защитного анализа. Не используйте...
NotEnough
Инструмент для взлома таблицы Хаффмана Этот инструмент вычисляет хитрую каноническую гистограмму Хаффмана, которая способна вызвать внеполосную OOB запись для уязвимой библиотеки libwebp т.е. libwebp = 1.3.1. Эта уязвимость известна как CVE-2023-4863 или CVE-2023-41064. Мы можем переполнить...
cve-2026-42945-nginx32-lab
Лаборатория эксплойта CVE-2026-42945 для nginx 32-bit Этот репозиторий представляет собой воспроизводимую Docker-лабораторию для изучения CVE-2026-42945 в nginx 1.30.0. Он содержит уязвимую 32-битную цель, триггер примитива, валидатор RCE с известным адресом, работающий при поддержке лаборатории,...
Linux Distros Unpatched Vulnerability : CVE-2026-63638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...
Linux Distros Unpatched Vulnerability : CVE-2026-63419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...
CVE-2026-92382
usbredir: usbredir: unbounded isopacketdesc index in usbredirhostisopacket leads to heap out-of-bounds write...
CVE-2026-75892
In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtpdecodepdpctx function through the PDP context GSN-Address sub-field, leading to memory corruption...
CVE-2024-43630-POC
CVE-2024-43630-POC Этот репозиторий содержит POC, который при выполнении вызывает запись за пределами стека OOB write, приводящую к краху системы. Эта уязвимость — чрезвычайно интересный и редкий артефакт, демонстрирующий сложность и особенности программирования ядра, особенно управления объектам...
CVE-2026-75892 Out of bounds write in PDP ctx GSN-Address decode
In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtpdecodepdpctx function through the PDP context GSN-Address sub-field, leading to memory corruption...
CVE-2026-77396 PJSIP: Heap buffer overflow in the AVI parser
PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/aviplayer.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived from the declared media...
CVE-2026-77396
PJSIP (a free and open source multimedia communication library in C) versions 2.17 and earlier contain a heap buffer overflow in the AVI parser at pjmedia/src/pjmedia/avi_player.c. The parser uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is...
CVE-2026-63638
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted cineon image can declare unsupported component bit depth 26. cineoninput::open maps it to a 32-bit imagespec,...
DEBIAN-CVE-2026-63422
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A valid tiled openexr image whose width is not a multiple of its tile width can trigger an overflow when a caller reads...
CVE-2026-63419
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled iff is exposed with a 16-bit public imagespec while the decoder retains a 32-bit internal pixel...
CVE-2026-84444 libheif uncompressed tiled image encoding allows out-of-bounds write
libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITHUNCOMPRESSEDCODEC is enabled, heifcontextaddimagetile accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image...
CVE-2026-84444 libheif uncompressed tiled image encoding allows out-of-bounds write
libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITHUNCOMPRESSEDCODEC is enabled, heifcontextaddimagetile accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image...
CVE-2026-67549 OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted 1-bit contiguous cmyk tiff is exposed through a native uint1 imagespec, so callers allocate a bit-packed buffer...
CVE-2026-63638 OpenImageIO: Cineon invalid bit depth heap out-of-bounds write
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted cineon image can declare unsupported component bit depth 26. cineoninput::open maps it to a 32-bit imagespec,...
CVE-2026-63419
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled iff is exposed with a 16-bit public imagespec while the decoder retains a 32-bit internal pixel...
CVE-2026-63419 OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled iff is exposed with a 16-bit public imagespec while the decoder retains a 32-bit internal pixel...