CentOS 9 : libpng-1.6.37-14.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libpng-1.6.37-14.el9 build changelog. - heap buffer over-read in pngimagewritebit RHEL-147356 CVE-2026-22801 - heap buffer over-read in pngimagefinishread RHEL-149000...

CVE-2025-14055

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet...

CVE-2025-14055

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet...

CVE-2025-14055 Integer underflow in Secure NCP host

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet...

CVE-2025-14055

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet...

CVE-2025-14055

CVE-2025-14055 concerns an integer underflow in Silicon Labs Secure NCP host implementation that can cause a buffer overread when processing a specially crafted packet. The affected component is the Secure NCP host software; the underlying cause is an underflow leading to reading beyond the alloc...

CVE-2025-14055 Integer underflow in Secure NCP host

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet...

PT-2026-21018

Name of the Vulnerable Software and Affected Versions Silicon Labs Secure NCP versions affected versions not specified Description An integer underflow in the Silicon Labs Secure NCP host implementation can lead to a buffer overread when processing a crafted packet. Recommendations At the moment,...

CVE-2025-14055: Integer Underflow (Wrap or Wraparound)

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet...

The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...

ROS-20260220-73-0018

A vulnerability in the lan743xptpioeventclockget function of the net component of the Linux operating system kernel is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...

The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...

The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...

The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...

The vulnerability of the record_func_key() function in the kernel/bpf/verifier.c module, part of the BPF interpreter support for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the recordfunckey function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260220-73-0003

A vulnerability in the ath9khtcswba function of the wifi component of the Linux operating system kernel is related to reading data outside of buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

PT-2026-40155

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A buffer over-read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no...

Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3171 (ALAS-2026-3171)

The version of thunderbird installed on the remote host is prior to 140.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3171 advisory. HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the...

Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-051 (ALASFIREFOX-2026-051)

The version of firefox installed on the remote host is prior to 140.7.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-051 advisory. HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the...

Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2026-1439)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1439 advisory. A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read. CVE-2025-32050 A flaw was found in libsoup. A vulnerability in...