CVE-2026-83742 wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

Linux Distros Unpatched Vulnerability : CVE-2026-81012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer...

CVE-2026-81012

A flaw was found in the Linux kernel's hp-bioscfg component. The hpgetstringfrombuffer function contains an off-by-one write vulnerability. This occurs because the NUL terminator can be written one byte beyond the allocated buffer, leading to a buffer overflow. An attacker could potentially explo...

CVE-2026-81012

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

DEBIAN-CVE-2026-81012

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

AZL-100590 CVE-2026-81012 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

UBUNTU-CVE-2026-81012

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

CVE-2026-81012

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

CVE-2026-81012 platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

EUVD-2026-76335

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

CVE-2026-81012 platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

CVE-2026-81012

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

CVE-2026-81012

CVE-2026-81012 is an off-by-one write in the Linux kernel's platform/x86: hp-bioscfg driver. The function hp_get_string_from_buffer() uses a strict greater-than (>) comparison when clamping the converted string length against the destination buffer size. When the converted length is exactly eq...

PT-2026-90142

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An off-by-one write exists in the hp get string from buffer function within the platform/x86: hp-bioscfg component. The function clamps the converted string length against the destination...

PT-2026-96504

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hp get string from buffer hp get string from buffer clamps the converted string length against the destination buffer size with "size dst size", so when the converted length is...

Linux Distros Unpatched Vulnerability : CVE-2026-57160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint...

CVE-2026-17469

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...

CVE-2026-17469

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to denial of service caused by an off-by-one write (CWE-787: Out-of-bounds Write) in the Line Printer Daemon (LPD) queue name parser . A local authenticated attacker can trigger the out-of-bounds write, resulting in a service disruption with a ...

CVE-2026-17469 IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...

EUVD-2026-71470

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...