397143 matches found
CVE-2026-18282 Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
EUVD-2026-63429
Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
CVE-2026-18282
The Sony XAV-9500ES infotainment system is vulnerable to a heap-based buffer overflow in the AVRCP_Br_Response_Parser component. The parser fails to validate the length of attacker-supplied AVRCP packet data before copying it to a heap buffer, enabling remote code execution after an attacker pair...
EUVD-2026-63428
Sony XAV-9500ES l2reassemblesdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
CVE-2026-18281 Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability
Sony XAV-9500ES l2reassemblesdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
CVE-2026-18281
CVE-2026-18281 is a heap-based buffer overflow in the Sony XAV-9500ES car audio/video receiver, specifically in the l2_reassemble_sdu function that handles Bluetooth L2CAP packets . The root cause is the lack of proper length validation on user-supplied data before copying it into a heap-based bu...
CVE-2026-18280 Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...
EUVD-2026-63427
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...
CVE-2026-18280
CVE-2026-18280 is a buffer overflow in the gpsd daemon of the Sony XAV-9500ES car audio device, specifically in the handling of NMEA data . The root cause is the lack of proper validation of user-supplied data length before copying it to a fixed-length buffer. A physically present attacker can ex...
EUVD-2026-63426
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...
CVE-2026-18279 Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...
CVE-2026-18279
The Sony XAV-9500ES digital media player is affected by a buffer overflow in its RTSP SETUP packet handling. The root cause is the lack of proper length validation on user-supplied data before it is copied into a fixed-length buffer, allowing a network-adjacent attacker to achieve remote code exe...
CVE-2026-77004
A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET§ion=ptestsn. Executing a manipulation of the argument sn can lead to command injection. The attack can be launched remotely. The exploit has been published and may b...
EUVD-2026-63418
Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specifi...
CVE-2026-18271
Kenwood DNR1007XR is affected by a heap-based buffer overflow in the vCardParser class. The root cause is the lack of proper validation of a user-supplied string before it is copied into a heap-allocated buffer. A physically present attacker can exploit this flaw without authentication to achieve...
EUVD-2026-63481
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...
CVE-2026-55194
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
CVE-2026-76917
A flaw was found in Wireshark. A heap-based buffer overflow vulnerability exists within the Bluetooth Audio/Video Remote Control Profile AVRCP protocol dissector. This flaw can be triggered by a local user processing a specially crafted Bluetooth AVRCP packet, which requires user interaction...
CVE-2026-74297
A flaw was found in the Linux kernel's RDMA/mlx5 subsystem. Insufficient validation of a user-provided input, rqwqeshift, in the setrqsize function can lead to an integer overflow. This overflow results in an undefined shift operation, which may cause system instability or a denial of service...