EUVD-2026-63100

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...

CVE-2026-76929

Wireshark's pcapng file parser contains an out-of-bounds read affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18, triggering a crash and denial of service when a crafted file is opened. Exploitation requires local access and user interaction; no in-the-wild exploitation is reported. Users should upg...

CVE-2026-76924

Wireshark versions 4.4.0–4.4.18 and 4.6.0–4.6.7 contain an out-of-bounds read in the Kerberos protocol dissector that crashes the application when processing malformed Kerberos traffic, causing denial of service (CVSS 5.5 MEDIUM). No exploitation observed in the wild. Update to a patched version;...

CVE-2026-76923

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76882

Wireshark's Bluetooth Attribute Protocol (ATT) dissector crashes in versions 4.6.0–4.6.7 and 4.4.0–4.4.18 when processing malformed Bluetooth traffic, causing denial of service. CVSS 4.7 (Medium) requires local access and user interaction. No exploitation evidence is provided. Upgrade to a patche...

EUVD-2026-62854

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...

CVE-2026-17015

IBM i versions 7.3 through 7.6 (feature 5770-SS1) suffer a CWE-125 out-of-bounds read, exploitable by a remote authenticated attacker to cause denial of service and leak sensitive information (CVSS 5.4 Medium). IBM provides PTFs: SJ11150 (7.6), SJ11149 (7.5), SJ11148 (7.4), SJ11147 (7.3); no work...

CVE-2026-16707

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox...

EUVD-2026-62825

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16891

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are affected by CWE-125 out-of-bounds read in the bos.mp64 kernel fileset, allowing a local attacker to obtain sensitive information (CVSS 3.3, LOW). IBM has released APARs (IJ59566–IJ59563) available via Service Packs/SP13–SP02 for AIX and Fix Packs 4.1.0.50–...

CVE-2026-17028

IBM PowerVM Hypervisor firmware (FW950.00–FW950.H2, FW1060.00–FW1060.80, FW1110.00–FW1110.30, FW1120.00) contains a CWE-125 out-of-bounds read in partition firmware during iSCSI SAN network boot. An unauthenticated attacker on the same network can halt a booting partition's availability (CVSS 6.5...

CVE-2026-16883

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

EUVD-2026-62869

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16866

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to an out-of-bounds read exploitable remotely (CVSS 4.8, HIGH complexity, no privileges) causing denial of service. IBM's support page (referenced) may contain patch details. No exploitation or in-the-wild activity is documented in the provided ...

EUVD-2026-62753

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-74485

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged local user, operating within a user namespace, could exploit this vulnerability. By registering a binfmtmisc string where the chosen delimiter character is also a flag character, the system's flag field parser can...

CVE-2026-45820

A flaw was found in fflate. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP archive. This archive, when processed, can lead to an infinite loop during decompression, causing a Denial of Service DoS condition. This occurs because a malformed central director...

CVE-2026-16833

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have an out-of-bounds read allowing remote, unauthenticated kernel memory disclosure (CVSS 5.3, MEDIUM). IBM support page is the only reference; no exploitation details provided.

EUVD-2026-62720

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read...

block_buffer: panic corrupts inline buffer position

Summary A caught panic may leave the cursor position of EagerBuffer or ReadBuffer in a corrupted state; this in turn allows out-of-bounds reads/writes. Details & PoC The following two tests fail miri: rust cfgmiri test fn eagerdigestblockspaniccorruptsinlineposition // EagerBuffer stores its curs...