CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV ヒープ OOB 書き込み PoC !WARNING このリポジトリには、ヒープ破壊の脆弱性に対する実動するエクスプロイト PoC が含まれています。 これは、許可されたセキュリティ研究、CTF コンテキスト、および防御的分析のみを目的としています。 自分が所有していないシステム、または明示的な書面による許可を得ていないシステムに対して使用しないでください。 影響を受けるバージョン: FFmpeg 8.0.1 MagicYUV デコーダー libavcodec/magicyuv.c プリミティブ: ヒ...

TUNderflow

TUNderflow CVE-2026-81000 Writeup !WARNING 本 PoC 仅用于帮助防御者、维护者和经授权的安全团队，在他们拥有或明确获授权测试的系统上验证补丁、缓解措施、检测规则和暴露面。 您需自行负责确保对本材料的使用是合法、经授权、受控的，并在隔离的测试环境中进行。 !WARNING 本 PoC 具有破坏性。 它会修改 /etc/pam.d/su，且没有任何回滚机制。 一次位置错误的覆写可能会破坏无关的内核内存，导致机器挂起或崩溃。 仅在一次性 VM/可丢弃主机上运行。 该 PoC： 1. 进入私有的用户/网络命名空间，创建 TUN 设备以及...

NotEnough

Huffman table hacking tool このツールは、脆弱性のあるlibwebpライブラリ（すなわちlibwebp = 1.3.1）に対してOOB（Out Of Band）書き込みを引き起こすことができる巧妙な正準ハフマンヒストグラムを計算します。この脆弱性はCVE-2023-4863またはCVE-2023-41064として知られています。事前に割り当てられたハフマンテーブルを最大132エントリ 分オーバーフローさせることができます。...

CVE-2026-31431

CVE-2026-31431 — 从空指针到 Root：利用 Linux 内核中的 AFALG AEAD 漏洞类型： 空指针解引用 → 堆越界写入 → 凭据覆盖 受影响子系统： net/alg/afalg.c 影响： 本地权限提升（非特权用户 → root） 受影响内核： Linux 4.4 – 4.9（补丁前） 简述 你调用 setsockopt 时传入一个 NULL 指针，而内核期望的是一个用户空间地址。内核从地址 0x00000000 读取数据——如果你已经映射了零页，你就能控制它读取的内容。这一原始原语会滚雪球式地演变为堆越界写入，让你能够覆盖自己的 cred 结构体。游戏结束。...

Updated python-pillow packages fix security vulnerabilities

Prevent decompression bomb when parsing PDF WindowsViewer.getcommand injection EPS image infinite loop JPEG2000 image memory usage McIdas out-of-bounds OOB read Out-of-bounds OOB read when saving 1 mode TGA images Out-of-bounds OOB write from large RankFilter sizes Out-of-bounds OOB write from...

Rocky Linux 9 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc (crlsa-2025_20532)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520532 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write. CVE-2024-45777 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: freetype / freetype-debuginfo / freetype-debugsource / etc (crlsa-2025_3407)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20253407 advisory. freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files CVE-2025-27363 Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_11299)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202411299 advisory. gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer CVE-2024-47540 gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c...

Rocky Linux 8 [CIQ] Security Update: freetype / freetype-debuginfo / freetype-debugsource / etc (crlsa-2025_3421)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20253421 advisory. freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files CVE-2025-27363 Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: mingw32-freetype / mingw32-freetype-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_8292)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20258292 advisory. freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files CVE-2025-27363 libsoup: Integer overfl...

Rocky Linux 9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (crlsa-2024_8162)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248162 advisory. kernel: Local information disclosure on IntelR AtomR processors CVE-2023-28746 kernel: netfilter: nftflowoffload: reset dst in route object after setting u...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_11122)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202411122 advisory. gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer CVE-2024-47540 gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1749826187)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1749826187 advisory. - GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1727167500)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1727167500 advisory. - btsockrecvmsg in net/bluetooth/afbluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a btsockioctl race...

RLSA-2026:72467 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: ext4: fix e4b bitmap inconsistency reports...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (CENTOS7:CLSA-2025:1763139214)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1763139214 advisory. - GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778756042)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778756042 advisory. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1749505638)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1749505638 advisory. - GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1748639719)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1748639719 advisory. - GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the...