190274 matches found
EUVD-2026-104838
A malformed header in the binary file fed to QBinaryJson::fromBinaryData can cause undefined behaviour because of out-of-bounds read...
CVE-2026-98711
A flaw was found in the Linux kernel's cw1200 wireless network driver. During data transmission, the driver pads transfer sizes to meet hardware alignment requirements without reserving sufficient space in the frame buffer. This causes the driver to read beyond the buffer boundaries and transmit...
SUSE-SU-2026:24365-1 Security update for libX11
This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. - CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser bsc1281653. - CVE-2026-94284: Out-of-bounds read vulnerability in libX11's...
Security update for libX11
This update for libX11 fixes the following issues: CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser bsc1281653. CVE-2026-94284: Out-of-bounds read vulnerability in libX11's XIM...
CVE-2026-98597
A flaw was found in the Linux kernel's sr9700 USB Ethernet driver. When processing incoming packets, the driver fails to properly account for packet header overhead during buffer length validation. An attacker capable of sending crafted packet data could trigger an out-of-bounds read, leading to ...
kernel: sctp: validate cookie AUTH state before use
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. When cookie authentication is disabled, the system improperly validates authentication AUTH fields restored directly from peer-controlled cookie bytes. A local attacker could exploit this by forging RANDOM lengths o...
kernel: xfrm: espintcp: do not reuse an in-progress partial send
A flaw was found in the Linux kernel. The espintcp component, responsible for handling encrypted network traffic, incorrectly reuses a partial data transmission state. This can lead to an out-of-bounds read, which may allow an attacker to access sensitive information or cause other memory...
CVE-2026-98583
A flaw was found in the Linux kernel's Marvell NFC Near Field Communication driver. During firmware download operations, the driver removes packet headers and reads command data before verifying that the received packet length is valid. An attacker could exploit this vulnerability by submitting a...
CVE-2026-98582
A flaw was found in the Linux kernel's ST21NFCA Near Field Communication NFC driver. The driver fails to properly validate the length of received frames when processing escape sequences. An attacker capable of sending crafted NFC frames could exploit this vulnerability to trigger an out-of-bounds...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decodeChunk method of UnsafeChunkDecoder, which resolves back references and copies literal runs through sun.misc.Unsafe without confirming that a back reference lands at or after the start of the output region...
kernel: sctp: validate cookie AUTH state before use
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. When cookie authentication is disabled, the system improperly validates authentication AUTH fields restored directly from peer-controlled cookie bytes. A local attacker could exploit this by forging RANDOM lengths o...
kernel: xfrm: espintcp: do not reuse an in-progress partial send
A flaw was found in the Linux kernel. The espintcp component, responsible for handling encrypted network traffic, incorrectly reuses a partial data transmission state. This can lead to an out-of-bounds read, which may allow an attacker to access sensitive information or cause other memory...
CVE-2026-98578
A flaw was found in the Linux kernel's ST21NFCA Near Field Communication NFC driver. This vulnerability allows a Denial of Service DoS when the system encounters malformed wireless NFC responses. A nearby attacker with a crafted NFC device can transmit a truncated ISO 15693 inventory response,...
CVE-2026-98576
A flaw was found in the Linux kernel's Near Field Communication NFC subsystem. When processing certain service names and requests, the kernel attempts to log strings that lack null-termination using an unbounded format specifier. A local user can exploit this vulnerability to trigger an...
CVE-2026-98575
A flaw was found in the Linux kernel's PN533 NFC Near Field Communication driver. An attacker capable of connecting a malicious or malfunctioning USB device can supply a crafted response frame with an arbitrary data length value. Because the driver fails to validate this length against maximum...
MGASA-2026-0528 Updated libxtst package fixes a security vulnerability
Out-of-bounds read in libXtst's RECORD reply parser. CVE-2026-94286...
Updated libxi package fixes security vulnerabilities
Out-of-bounds read in libXi's XQueryDeviceState. CVE-2026-93541 Out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses. CVE-2026-93542 Out-of-bounds read in libXi's XI2 class parser. CVE-2026-93543 Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing...
MGASA-2026-0526 Updated libxi package fixes security vulnerabilities
Out-of-bounds read in libXi's XQueryDeviceState. CVE-2026-93541 Out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses. CVE-2026-93542 Out-of-bounds read in libXi's XI2 class parser. CVE-2026-93543 Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing...