397622 matches found
kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...
kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2
A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. A local user could exploit a boundary error in the debug address watch v2 functionality by providing a specially crafted watchid. This could lead to a buffer overflow, potentially allowing memory access outside of...
kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()
A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode
A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...
kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset
A flaw was found in the Linux kernel's drm/i915/gem component. This vulnerability occurs because the sgpage function incorrectly scales pread/pwrite operations for physical Buffer Objects BO when a non-zero offset is used. This can lead to incorrect memory access, potentially allowing an attacker...
kernel: udf: fix partition descriptor append bookkeeping
A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially...
kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11
A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. This buffer overflow vulnerability occurs due to incorrect memory buffer handling during CRIU Checkpoint/Restore in User-space operations on SDMA System Direct Memory Access queues. A local attacker can exploit this fl...
CVE-2026-19582
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...
CVE-2026-19582 Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...
CVE-2026-19582 Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...
CVE-2026-19582
In binutils 2.46.1 and earlier, the rsrc_print_name function suffers a stack buffer overflow from an untrusted PE file, enabling arbitrary code execution with HIGH severity (CVSS 7.8). No exploit code or in-the-wild activity is reported; upgrade binutils beyond 2.46.1 to remediate.
CVE-2026-19582
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write. Mitigation Do not open unknown files and/or files from an untrusted source using binutils...
EUVD-2026-63197
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...
kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...
CVE-2026-76350
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:09+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-22 19:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtoxuro5jj24...
CVE-2026-76348
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:04+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76347
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:02+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76252
creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:05+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76957
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...
CVE-2026-76956
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content...