Lucene search
+L

128144 matches found

NVD
NVD
added 1 hour ago4 views

CVE-2026-51261

Missing mutex synchronization in AudioBuffer::freeSpace in schreibfaul1 ESP32-audioI2S 3.4.5 creates a race condition between concurrent tasks. The function calculates available buffer space without protecting shared read/write pointers, returning an incorrectly large value. Trusting this value...

SaveExploits0References2
RedHat Linux
RedHat Linux
added 4 hours ago3 views

gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling

A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmetic, bypassing a length check and leading to out-of-bounds reads. A remote attacker could trick a user into opening a...

7.1CVSS7.2AI score0.0031EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 4 hours ago2 views

CVE-2026-64225

A flaw was found in the Linux kernel's octeontx2-af: CGX component. This vulnerability arises from an out-of-bounds array access. Specifically, the RESPLINKSTATSPEED function can produce an index value that exceeds the allocated size of the cgxspeedmbps array, leading to memory corruption. This...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-62430

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

5.9AI score
SaveExploits0References2
Cvelist
Cvelist
added 4 hours ago7 views

CVE-2026-62430 x86: Out-of-bounds read in vRTC emulation

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

SaveExploits0References1
CVE
CVE
added 4 hours ago7 views

CVE-2026-62430

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

5.9AI score
SaveExploits0References2
NVD
NVD
added 4 hours ago4 views

CVE-2026-21047

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code...

8.3CVSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 5 hours ago42 views

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

7CVSS6.1AI score0.0013EPSS
SaveExploits0References5Affected Software2
RedhatCVE
RedhatCVE
added 5 hours ago4 views

CVE-2026-58023

A flaw was found in Apache Thrift cglib bindings. This out-of-bounds read vulnerability allows an attacker to potentially access sensitive information or cause a denial of service. The vulnerability occurs when the software attempts to read data beyond the allocated memory buffer...

9.1CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
added 5 hours ago6 views

CVE-2026-21047

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code...

8.3CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 5 hours ago2 views

CVE-2026-21047

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code...

8.3CVSS6.2AI score
SaveExploits0References2
EUVD
EUVD
added 5 hours ago3 views

EUVD-2026-49757

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code...

8.3CVSS6.2AI score
SaveExploits0References1
CVE
CVE
added 5 hours ago7 views

CVE-2026-21047

CVE-2026-21047 involves an out-of-bounds write in the ImsService, before SMR Jul-2026 Release 1. This condition could enable remote code execution. The impact is described as potentially arbitrary code execution by a remote attacker, with network access required and no user interaction. The remed...

8.3CVSS6.2AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago3 views

EUVD-2026-49750

A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not account for the full size of the data being...

3.3CVSS5.8AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 7 hours ago2 views

CVE-2026-64209

A flaw was found in the Linux kernel, specifically within the Qualcomm QCOM QMP USBC PHY Physical Layer driver. An incorrect boundary check during the configuration of DisplayPort DP swing settings allows for an out-of-bounds array access. This vulnerability can lead to memory corruption,...

5.8AI score0.00155EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 7 hours ago2 views

CVE-2026-64255

A flaw was found in the Linux kernel's iwlwifi Intel Wireless WiFi driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement BA session handlers. This occurs when the stamask value is zero, leading to an incorrect station ID calculatio...

8.8CVSS5.8AI score0.00226EPSS
SaveExploits0References4
OSV
OSV
added 7 hours ago2 views

BIT-THRIFT-2026-58023 Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

Out-of-bounds Read vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

9.1CVSS5.8AI score
SaveExploits0References4
NCSC
NCSC
added 7 hours ago9 views

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...

10CVSS7.5AI score0.49727EPSS
SaveExploits20References3
OSV
OSV
added 9 hours ago2 views

USN-8620-1 linux-azure-5.15, linux-azure-fde-5.15, linux-oracle-5.15 vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

9.8CVSS6.5AI score0.07644EPSS
SaveExploits8References763
Ubuntu
Ubuntu
added 9 hours ago3 views

USN-8620-1: Linux kernel vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

9.8CVSS6.7AI score0.07644EPSS
SaveExploits8
Rows per page
Query Builder