objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

EUVD-2026-118395

EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in checkedffile that allows attackers to overflow the 256-element annotch array by supplying excessive annotation signals. Attackers can craft an EDF+ or BDF+ file with more than 256 annotation signals to overwrite edfhdrblock...

CVE-2026-112334

Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged manager-configuration attackers to corrupt root process memory via excess ar.conf entries. Attackers controlling ossec.conf active-response blocks can push over 64 commands to agents...

CVE-2026-112334

Wazuh versions 1.0.0 before 4.14.9 are vulnerable to an out-of-bounds write vulnerability in wazuh-execd . An attacker with privileged manager-configuration access can corrupt root process memory by providing excess ar.conf entries. Specifically, by controlling ossec.conf active-response blocks, ...

EUVD-2026-118277

Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged manager-configuration attackers to corrupt root process memory via excess ar.conf entries. Attackers controlling ossec.conf active-response blocks can push over 64 commands to agents...

CVE-2026-112334 Wazuh 1.0.0 before 4.14.9 Out-of-Bounds Write in wazuh-execd via ar.conf

Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged manager-configuration attackers to corrupt root process memory via excess ar.conf entries. Attackers controlling ossec.conf active-response blocks can push over 64 commands to agents...

CVE-2026-121952

A flaw was found in FreeRDP. An out-of-bounds write vulnerability exists in freerdp-proxy when processing Bitmap Cache v2 capability sets. The proxy accepts a client-declared numCellCaches value below five and later indexes the bitmap cache cell array at fixed positions 0 through 4. A client that...

tesseract security update

An update is available for tesseract. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A commercial quality OCR engine originally developed at HP between 1985 and...

xorg-x11-server-Xwayland security update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...

CVE-2026-89142

In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-89782

A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS image. During the processing of the $LogFile, an integer truncation error occurs when attempting to grow the restart table, leading to an...

CVE-2026-89142

The Wi-Fi NPU FW is vulnerable to an out-of-bounds write caused by an incorrect bounds check . This security flaw could lead to a local denial of service . Exploitation requires user execution privileges , and no user interaction is required. No specific exploit information or remediation steps a...

EUVD-2026-117885

In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-89142 Out-of-bounds Write in Wi-Fi NPU

In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-123200

A flaw was found in vrpn. An unauthenticated remote attacker can trigger an out-of-bounds write vulnerability by sending specially crafted network messages containing an invalid length index. Successful exploitation leads to memory corruption, causing the application to crash and resulting in a...

CVE-2024-21762

CVE-2024-21762 - FortiGate SSL VPN RCE Detection & Exploitation Tool Detection and exploitation tool for CVE-2024-21762 - Critical FortiGate SSL VPN vulnerability ⚠️ LEGAL DISCLAIMER : This tool is for authorized test environments only. Unauthorized use on systems is ILLEGAL and may result in...

CVE-2026-89142: Airoha Technology Corp.: In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check

In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-112334: wazuh: Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged…

Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged manager-configuration attackers to corrupt root process memory via excess ar.conf entries. Attackers controlling ossec.conf active-response blocks can push over 64 commands to agents...

CVE-2026-107891

A flaw was found in musl. A remote attacker could achieve arbitrary code execution or cause a denial of service DoS by supplying a specially crafted regular expression to an application. Due to integer overflow vulnerabilities within the regcomp function, which compiles regular expressions, the...

Important: Red Hat Security Advisory: tesseract security update

An update for tesseract is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...