32 matches found
MGASA-2026-0553 Updated libical package fixes security vulnerabilities
Denial of Service via crafted iCalendar property parsing. CVE-2026-88383 Heap Out-of-Bounds Read via icalvaluedecodeicalstring. CVE-2026-111269...
Updated libical package fixes security vulnerabilities
Denial of Service via crafted iCalendar property parsing. CVE-2026-88383 Heap Out-of-Bounds Read via icalvaluedecodeicalstring. CVE-2026-111269...
Fedora 43 : libical (2026-d4c8dad1fd)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4c8dad1fd advisory. Add a patch for CVE-2026-88383: Denial of Service via crafted iCalendar property parsing Tenable has extracted the preceding description block directly from...
Fedora 44 : libical (2026-a76bba1412)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a76bba1412 advisory. Add a patch for CVE-2026-88383: Denial of Service via crafted iCalendar property parsing Tenable has extracted the preceding description block directly from...
USB4 Thunderbolt General Support Driver Heap Buffer Overflow DoS
The vulnerability in the tbpropertyparsedir function within drivers/thunderbolt/property.c of the USB4 and Thunderbolt support driver for the Linux kernel is related to buffer overflow. Exploitation of this vulnerability may allow an attacker to disclose protected information or cause a denial of...
libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties
A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...
SUSE CVE-2026-63891
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in tbpropertyparsedir A DIRECTORY entry's value field is used as the diroffset for a recursive call into tbpropertyparsedir with no depth counter. A crafted peer that chains DIRECTORY...
SUSE CVE-2026-63892
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
CVE-2026-63893
The connected documents describe a Linux kernel vulnerability in thunderbolt property parsing: a wrap of the 32-bit sum (entry->value + entry->length) allows an attacker-controlled offset to read memory beyond the property block. The root cause is not validating the sum with overflow checks...
CVE-2026-63892 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
CVE-2026-63892
CVE-2026-63892 affects the Linux kernel thunderbolt property parsing. The non-root path in __tb_property_parse_dir() may read beyond the end of a property block when entry->length length and the code copies 4 dwords from dir_offset regardless of dir_len. This creates two OOB conditions: (1) a ...
EUVD-2026-45665
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
CVE-2026-63892
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
EUVD-2026-45664
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in tbpropertyparsedir A DIRECTORY entry's value field is used as the diroffset for a recursive call into tbpropertyparsedir with no depth counter. A crafted peer that chains DIRECTORY...
CVE-2026-63891
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in tbpropertyparsedir A DIRECTORY entry's value field is used as the diroffset for a recursive call into tbpropertyparsedir with no depth counter. A crafted peer that chains DIRECTORY...
CVE-2026-56003 libXfont2 computeProps Property Buffer Heap Buffer Overflow
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...
AZL-90285 CVE-2026-53149 affecting package kernel for versions less than 6.6.143.1-1
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directory content to block size tbpropertyparsedir does not check that contentoffset + contentlen fits within blocklen for the root directory case. When rootdir-length equals or exceeds blocklen - 2, the...
mongoose:fuzz: Heap-buffer-overflow in mg_mqtt_next_prop
Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=5230206175739904 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7caa794ece...