48309 matches found
CVE-2026-76989
A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enetencap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be...
CVE-2026-76988
A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function CipConnMgrClass::forwardopen of the file cipconnectionmanager.cc of the component ForwardOpen Handler. Executing a manipulation of the argument productcode can lead to...
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash...
kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
A flaw was found in the Linux kernel's nfconntrackh323 helper. A remote attacker could exploit this by sending a specially crafted Q.931 SETUP message to port 1720 through a firewall with the nfconntrackh323 helper active. This memory corruption vulnerability leads to an out-of-bounds read, which...
kernel: smb: client: validate DFS referral PathConsumed
A flaw was found in the Linux kernel's Server Message Block SMB client. A remote attacker could send a specially crafted SMB response containing a malformed Distributed File System DFS referral. This could cause the PathConsumed value to exceed the search name length, leading to an out-of-bounds...
kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...
kernel: smb/client: handle overlapping allocated ranges in fallocate
A flaw was found in the Linux kernel's Server Message Block SMB client. The smb3simplefallocaterange function, which manages file allocation, can incorrectly process overlapping allocated ranges provided by a server. This can result in parts of a file not being properly zero-filled, leading to...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
kernel: smb/client: fix out-of-bounds read in symlink_data()
A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability arises from insufficient length validation in the smb2checkmessage function when processing symlink error responses. A remote attacker could exploit this by sending a specially crafted symlink error respons...
kernel: smb/client: handle overlapping allocated ranges in fallocate
A flaw was found in the Linux kernel's Server Message Block SMB client. The smb3simplefallocaterange function, which manages file allocation, can incorrectly process overlapping allocated ranges provided by a server. This can result in parts of a file not being properly zero-filled, leading to...
kernel: smb/client: handle overlapping allocated ranges in fallocate
A flaw was found in the Linux kernel's Server Message Block SMB client. The smb3simplefallocaterange function, which manages file allocation, can incorrectly process overlapping allocated ranges provided by a server. This can result in parts of a file not being properly zero-filled, leading to...
kernel: smb/client: handle overlapping allocated ranges in fallocate
A flaw was found in the Linux kernel's Server Message Block SMB client. The smb3simplefallocaterange function, which manages file allocation, can incorrectly process overlapping allocated ranges provided by a server. This can result in parts of a file not being properly zero-filled, leading to...
GHSA-FHG4-WHCV-F8V4 vulnerabilities
Vulnerabilities for packages: exim...
EUVD-2026-63100
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-76929
Wireshark's pcapng file parser contains an out-of-bounds read affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18, triggering a crash and denial of service when a crafted file is opened. Exploitation requires local access and user interaction; no in-the-wild exploitation is reported. Users should upg...
CVE-2026-76924
Wireshark versions 4.4.0–4.4.18 and 4.6.0–4.6.7 contain an out-of-bounds read in the Kerberos protocol dissector that crashes the application when processing malformed Kerberos traffic, causing denial of service (CVSS 5.5 MEDIUM). No exploitation observed in the wild. Update to a patched version;...
CVE-2026-76923
Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76882
Wireshark's Bluetooth Attribute Protocol (ATT) dissector crashes in versions 4.6.0–4.6.7 and 4.4.0–4.4.18 when processing malformed Bluetooth traffic, causing denial of service. CVSS 4.7 (Medium) requires local access and user interaction. No exploitation evidence is provided. Upgrade to a patche...
