EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

CVE-2026-45199

The rgxfw_to_ptr() function in Imagination's GPU DDK fails to validate firmware private data pointers, allowing Guest VM kernel software to trigger out-of-bounds memory writes via GPU firmware commands, enabling privilege escalation. Exploitation status is not provided. Reference: https://www.ima...

EUVD-2026-63665

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

EUVD-2026-63754

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...

EUVD-2026-63745

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write...

EUVD-2026-63728

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write...

EUVD-2026-63699

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

EUVD-2026-63635

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write...

PT-2026-79295

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

CVE-2026-19783

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a kernel memory corruption flaw: insufficient validation during directory reads of a crafted filesystem image causes an out-of-bounds kernel-stack write, risking system crash or privilege escalation. IBM PSIRT reference: https://www.ibm.com/support/pages/...

CVE-2026-18842

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write...

CVE-2026-17003

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are affected by an out-of-bounds write flaw exploitable over the network (CVSS 7.7 HIGH), allowing attackers to compromise system confidentiality and integrity. IBM has published a support advisory at https://www.ibm.com/support/pages/node/7283858; no specific...

CVE-2026-16958

CVE-2026-16958 is a CWE-787 out-of-bounds write in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1, exploitable via adjacent network with no privileges to cause denial of service (CVSS 6.5, MEDIUM). IBM has released APARs (IJ59563–IJ59566) and corresponding Service/Fix Packs for affected AIX and VIOS levels...

CVE-2026-43798

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...

CVE-2026-18295

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2026-74300

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI component. A malicious Bluetooth controller could send a specially crafted response during the 'Read Local Codec Capabilities' operation. Insufficient validation of the codec capability element length could allow the...

EUVD-2026-63444

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2026-18295 GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2026-18295

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

EUVD-2026-63442

OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targe...