The vulnerability of the setBufferingPeriodSEI function in the vvdecapp component (VVdeC), which relates to reading beyond the buffer, allows a hacker to trigger a service failure or gain access to protected information.

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

SUSE SLES16 Security Update : exiv2 (SUSE-SU-2026:23871-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23871-1 advisory. - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2019-7489

このリポジトリには README がありません。...

CVE-2015-6086

クラッシュからエクスプロイトへ: CVE-2015-6086 - 境界外読み取り/ASLR バイパス root@kitploit: $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ / |$$$$\ $$ |$$ / $$ | $$ |...

CVE-2019-19012

Oniguruma における整数オーバーフロー Oniguruma 6.x（6.9.4rc2 より前）の regexec.c の searchinrange 関数における整数オーバーフローは、範囲外読み取りを引き起こします。この読み取りのオフセットは攻撃者の制御下にあります。（これは 32 ビットでコンパイルされたバージョンのみに影響します）。リモートの攻撃者は、巧妙に細工された正規表現によって、サービス拒否や情報漏えい、あるいはその他の不特定の影響を引き起こす可能性があります。 研究者: ManhND（The Tarantula Team、VinCSS（Vingroup のメンバー））...

CVE-2022-46152

CVE-2022-46152 OP-TEE OScleanupshmrefs 領域外読み取り — 再現環境 Reference: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Security Advisory: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 脆弱性概要 項目| 詳細 ---|--- 脆弱性| cleanupshmrefs は numparams...

CVE-2021-45067

CVE-2021-45067 このバグは、ANSI 文字列を Unicode として扱うことによる Out of Bounds Read であり、サンドボックス化された Adobe Reader プロセスから機密情報を漏洩するために悪用される可能性があります。 Blog Adobe Reader - XFA - ANSI - Unicode 混乱による情報漏洩 Advisory CVE-2021-45067 Demo...

CVE-2026-100505 Ghidra 11.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in...

EUVD-2026-87374

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in...

openSUSE 16: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix3 / etc (openSUSE-SU-2026:21938-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21938-1 advisory. - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read...

SUSE SLES12: gnome-shell / gnome-shell-browser-plugin / gnome-shell-devel / etc (SUSE-SU-2026:4350-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4350-1 advisory. This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote...

iOS26.6-CVE-2026-65343

CVE-2026-65343 — AppleKeyStore 領域外読み取り（KASLR 無効化） コンポーネント: AppleKeyStore カーネル拡張 — LibSerSEPControlDeserialize 影響を受けるバージョン: iOS / iPadOS 26.6 23G71 以前 修正バージョン: iOS / iPadOS 26.6.1 23G83 種別: SEP 制御メッセージ逆シリアル化における領域外読み取り 影響: カーネルポインタ漏洩 → サンドボックス化された権限不要プロセスからの KASLR 無効化（DYLDINTERPOSE ACM ハンドル取得経由）...

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2026-92842

A flaw was found in PHP. When processing certain conversion stream filters with line-break settings containing a null byte, the filter duplicates the string but retains the original length rather than the truncated size. An attacker who can influence filter options could exploit this out-of-bound...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2025-1218

A flaw was found in PHP. The MySQL Native Driver mysqlnd wire protocol parser fails to verify that an incoming packet contains enough bytes before reading its fields. A malicious or compromised database server can send a truncated packet, causing the client application to read past the buffer...

EUVD-2025-211005

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...