The vulnerability of the functions thc_i2c_subip regsave() and thc_i2c_subip regs_restore() in the driver/hid/intel-thc-hid/intel-thc/intel-thc-dev.c module of the Linux kernel’s user interface subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions thci2csubip regsave and thci2csubip regs Restore in the driver/hid/intel-thc-hid/intel-thc/intel-thc-dev.c module of the Linux kernel’s user interface device subsystem is related to accessing memory beyond the permissible buffer data size due to arithmetic addre...

The vulnerability of the PowerVR graphics driver in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the PowerVR graphics driver in Google Chrome and Microsoft Edge is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260317-73-0011

A vulnerability in the i2cdwxferinit function of the drivers/i2c/busses/i2c-designware-master.c module of the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory as a result of incorrect resource initialization. Exploitation of the vulnerability could...

CVE-2026-3086

GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2025-71264

Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service client crash...

The vulnerability of the CUPS Filters printing package lies in the possibility of a write-off operation going beyond the buffer boundaries in memory, allowing an attacker to cause a service failure.

The vulnerability of the CUPS Filters printing package relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, which allows a hacker to trigger a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created TIFF file...

The vulnerability of the tas2563_save_calibration() function in the sound/hda/codecs/side-codecs/tas2781_hda_i2c.c module of the Linux kernel’s audio subsystem allows a hacker to trigger a service failure.

The vulnerability of the tas2563savecalibration function in the sound/hda/codecs/side-codecs/tas2781hdai2c.c module of the Linux kernel’s audio subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the CUPS Filters printing package and the Libcupsfilters library for printing servers allows a attacker to cause a service failure.

The vulnerability of the CUPS Filters printing package and the Libcupsfilters printing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

OESA-2026-1617 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light Magic for use in computer imaging applications. Security Fixes: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture...

CVE-2026-3086

GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-2923

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...

CVE-2026-2923

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...

CVE-2026-29774

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client's AVC420/AVC444 YUV-to-RGB conversion path due to missing horizontal bounds validation of H.264 metablock regionRects coordinates. In yuv.c, the clamp...

ROS-20260313-73-0026

A vulnerability in the ipmicreateuser function of the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the software for creating 3D visualizations in Adobe Substance 3D Stager lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for creating 3D visualizations in Adobe Substance 3D Stager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

GNU Inetutils 安全漏洞

GNU Inetutils are a set of common network programs from the GNU community in the United States. Versions of GNU Inetutils 2.7 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the addslc function in the LINEMODE SLC sub-program, which did not check whether the...

postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database...

postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database...