Lucene search
+L

580 matches found

Snyk
Snyk
•added 2026/04/16 9:30 p.m.•17 views

Memory Allocation with Excessive Size Value

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the FlateDecode method when handling streams with a /Predictor value not equal to ...

6.5CVSS5.8AI score0.00406EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/16 10:40 a.m.•7 views

SUSE-SU-2026:1398-1 Security update for freerdp

This update for freerdp fixes the following issues: Security fixes: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. - CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. - CVE-2026-31806: improper...

9.8CVSS6.3AI score0.00865EPSS
SaveExploits5References15
Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•14 views

PT-2026-34565

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.10.2 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that leads to RAM exhaustion. This occurs when accessing a stream compressed using '/FlateDecode' with a /Predictor unequal to 1...

6.5CVSS5.1AI score0.00406EPSS
SaveExploits0References24
OSV
OSV
•added 2026/04/01 1:40 p.m.•8 views

SUSE-SU-2026:1165-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. - CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. - CVE-2026-31806: improper validation of server...

9.8CVSS6.5AI score0.00865EPSS
SaveExploits5References13
SUSE Linux
SUSE Linux
•added 2026/03/27 3:05 p.m.•11 views

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. CVE-2026-31806: improper validation of server messages c...

8.8CVSS6.6AI score0.00865EPSS
SaveExploits5References24
SUSE CVE
SUSE CVE
•added 2026/03/16 5:32 p.m.•9 views

SUSE CVE-2026-31885

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

7.1CVSS5.8AI score0.00392EPSS
SaveExploits1References15
NVD
NVD
•added 2026/03/13 7:54 p.m.•9 views

CVE-2026-31885

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

9.4CVSS0.00392EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/03/13 7:54 p.m.•13 views

CVE-2026-31885

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

9.4CVSS6.2AI score0.00392EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2026/03/13 7:48 p.m.•12 views

CVE-2026-31885

An out of bounds read flaw has been discovered in FreeRDP. This out-of-bounds read exists in the MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. An attacker may be able to leverage this weakness to leak global data. Mitigation Mitigation for this...

9.4CVSS5.5AI score0.00392EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/03/13 5:38 p.m.•14 views

CVE-2026-31885

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

6.5CVSS5.8AI score0.00392EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2026/03/13 5:38 p.m.•90 views

CVE-2026-31885

CVE-2026-31885 : FreeRDP has an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and step_index values from input data. Affected before 3.24.0 and fixed in 3.24.0. Multiple advisories corroborate this fix in FreeRDP releases.

9.4CVSS5.8AI score0.00392EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
•added 2026/03/13 5:38 p.m.•16 views

EUVD-2026-12063

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

6.5CVSS5.8AI score0.00392EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2026/03/13 5:38 p.m.•14 views

CVE-2026-31885

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

9.4CVSS5.8AI score0.00392EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/03/13 5:38 p.m.•8 views

CVE-2026-31885 FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

6.5CVSS5.8AI score0.00392EPSS
SaveExploits1References2
OSV
OSV
•added 2026/03/13 5:38 p.m.•10 views

CVE-2026-31885 FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

6.5CVSS5.9AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•13 views

FreeRDP 缓冲区错误漏洞

FreeRDP is an open-source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. Versions of FreeRDP prior to 3.24.0 contained a buffer error vulnerability. This vulnerability stemmed from the lack of checks on the predictor and stepindex values in the input data by the MS-ADPCM a...

9.4CVSS6AI score0.00392EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/01/30 12:00 a.m.•8 views

SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:0329-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0329-1 advisory. - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing XSA-477 bsc1256745 - CVE-2026-23553: Fix...

6AI score0.00134EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/01/29 12:00 a.m.•10 views

openSUSE 15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2026:0306-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0306-1 advisory. - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing XSA-477 bsc1256745 - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation...

6AI score0.00134EPSS
SaveExploits0References7
OSV
OSV
•added 2026/01/28 4:16 p.m.•17 views

CVE-2026-23553

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

2.9CVSS5.8AI score
SaveExploits0References3
NVD
NVD
•added 2026/01/28 4:16 p.m.•14 views

CVE-2026-23553

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

2.9CVSS0.00134EPSS
SaveExploits0References3
Rows per page
Query Builder