vvdecapp Component Buffer Overflow DoS

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

CVE-2021-21017

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bug : IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 && relu...

tcpdump

TCPDUMP 4.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing in the tcpdump source tree root. Anonymo...

CVE-2026-99063

The Linux kernel contains a vulnerability in the dm ioctl handling where the get_result_buffer() function fails to verify the buffer size relative to the struct dm_ioctl trailing padding. This allows data_start to point seven bytes past the end of the buffer, leading to a slab-out-of-bounds read ...

CVE-2026-99020

The Linux kernel contains a memory safety issue within the tps6594-regulator driver. Specifically, the TPS65224 BUCK2, BUCK3, and BUCK4 descriptors incorrectly report 4 as the number of linear ranges, while the underlying tps65224_bucks_2_3_4_ranges[] array only contains two entries. This discrep...

CVE-2026-99002

The Linux kernel contains a vulnerability in the drm/vmwgfx component. The root cause is a failure to properly validate the pitch provided from userspace before attempting to copy data from the underlying surface. This oversight can lead to out-of-bounds reads during cursor snooping . The issue h...

CVE-2026-98969

The Linux kernel contains a vulnerability in net/sched where em_text_change() fails to enforce a NUL terminator on the 16-byte algo array. When textsearch_prepare() is called on a TS_AUTOLOAD retry, vsnprintf() may perform an out-of-bounds read if the array is not terminated, leaking adjacent ker...

CVE-2026-98952

A vulnerability exists in the Linux kernel within the pfcp component. The pfcp_encap_recv() function fails to verify that the 8-byte SEID is in the linear area when the S flag is set, as the pskb_may_pull() check only covers the UDP header and the 4-byte PFCP header. This can cause pfcp_session_r...

CVE-2014-4378

CoreGraphics Information Disclosure - CVE-2014-4378 This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fail...

EUVD-2026-108687

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...

EUVD-2026-108686

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The notification parser used that count without checking whether the...

CVE-2026-98891

The Linux kernel contains a vulnerability in the wifi: mac80211 component. The function ieee80211_rx_mgmt_deauth() incorrectly reads the deauth reason code before verifying that the fixed field is actually present in the received frame. The vulnerability is addressed by validating the deauth fram...

EUVD-2026-108685

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211rxmgmtdeauth reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length...

CVE-2026-98890

The Linux kernel contains a vulnerability in the libertas wifi driver. Specifically, in monitor mode, the function lbs_hard_start_xmit() fails to perform sufficient length checks when casting skb->data to a radiotap TX header . Because the generic check only rejects zero-length or oversized sk...

EUVD-2026-108684

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX frames In monitor mode, lbshardstartxmit casts skb-data to a radiotap TX header, skips that header, and then copies the 802.11 destination address from offset 4 in the remaining frame. The...

CVE-2026-98887

The Linux kernel contains a vulnerability in the wifi: mac80211_hwsim component. The function hwsim_tx_info_frame_received_nl() incorrectly handles the HWSIM_ATTR_TX_INFO payload by casting it to a struct hwsim_tx_rate * and reading 8 bytes of IEEE80211_TX_MAX_RATES entries. Because the policy on...

EUVD-2026-108681

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: reject undersized HWSIMATTRTXINFO hwsimtxinfoframereceivednl casts the HWSIMATTRTXINFO payload to a struct hwsimtxrate and unconditionally reads IEEE80211TXMAXRATES entries 8 bytes from it. The policy only...

CVE-2026-110912

🩸 CVE-2026-110912 — ARPBleed 🩸 ARP Packet Handling Vulnerability | DragonFly BSD | Security Research 🩸 Overview ARPBleed is the name associated with the reported vulnerability CVE-2026-110912, involving improper handling of Address Resolution Protocol ARP packet length fields in DragonFly BSD...

CVE-2020-1493

CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...

CVE-2021-45067

CVE-2021-45067 This bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process. Blog Adobe Reader - XFA - ANSI - Unicode Confusion Information Leak Advisory CVE-2021-45067 Demo...