190355 matches found
Out-of-bounds Read
Overview github.com/gomarkdown/markdown/parser is a library for parsing Markdown text and rendering as HTML. Affected versions of this package are vulnerable to Out-of-bounds Read through the IsSafeURL function. An attacker can cause a panic and crash the application by supplying a specially...
CLSA-2026-1792165254 Fix CVE(s): CVE-2026-44185
SECURITY UPDATE: modssl: buffer over-read in OCSP request sending - debian/patches/CVE-2026-44185.patch: advance the write buffer by the number of bytes actually sent in sendrequest - CVE-2026-44185...
CVE-2026-111271
A flaw was found in libmodplug. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing applications that rely on the library to process audio files. By enticing a user or automated system to load a specially crafted AMS audio tracker file, the decoder reads data past t...
CVE-2026-111166
A flaw was found in libmikmod. An attacker could exploit this vulnerability by providing a specially crafted IMF module file to an application utilizing the library. When the file is parsed by the IMFLoad loader function, an out-of-bounds read occurs in heap memory, causing the application to cra...
CVE-2026-111159
A flaw was found in libewf. An attacker could exploit this vulnerability by convincing a user to process a specially crafted file with oversized extended attribute metadata. Due to improper size validation, the library performs an out-of-bounds memory read, which can cause the application to cras...
CVE-2026-111148
A flaw was found in libsidplayfp. By enticing a user or application to process a specially crafted audio file with an invalid data offset, an attacker can trigger an out-of-bounds read beyond allocated heap memory. This issue primarily results in an application crash, causing a Denial of Service...
CVE-2026-111165
A flaw was found in libmikmod. An attacker can provide a specially crafted MultiTracker MTM audio file to an application utilizing the library. Because the file parser does not properly validate the module channel count, parsing the file triggers an out-of-bounds memory read. This issue can cause...
CVE-2026-111158
A flaw was found in libmseed. A heap-based out-of-bounds read vulnerability exists in the ms3detect function when processing truncated record buffers. By tricking a user or application into parsing a specially crafted input, an attacker can cause the library to read past allocated memory...
CVE-2026-111155
A flaw was found in libtimidity. The SoundFont loader fails to properly validate sample and instrument index values, leading to an out-of-bounds memory read. An attacker could exploit this vulnerability by providing a specially crafted SoundFont .sf2 audio file, causing the application to crash a...
CVE-2026-111139
A flaw was found in libnsbmp. This vulnerability allows an attacker to cause a Denial of Service DoS by tricking an application into processing a specially crafted icon ICO file. Due to improper bounds checking when decoding mask data for an image whose bitmap width is not an expected multiple of...
CVE-2026-111152
A flaw was found in game-music-emu. This flaw allows an attacker to cause a Denial of Service DoS by crashing applications that process untrusted audio files. By providing a specially crafted ZXAYEMUL file with an oversized track table, an integer underflow in the AY loader triggers an...
CVE-2026-111138
A flaw was found in libnsbmp. An attacker can exploit this vulnerability by providing a specially crafted bitmap BMP image file to an application utilizing the library. Due to improper bounds checking during the decoding of compressed image data, processing the malformed image triggers an...
CVE-2026-111149
A flaw was found in FreeImage. By providing a specially crafted PICT image file with manipulated row dimensions, an attacker could trigger an out-of-bounds read in the image unpacking routine. This vulnerability could lead to a Denial of Service DoS by causing the application to crash or result i...
CVE-2026-111153
A flaw was found in game-music-emu. The library fails to properly validate the voice count in audio headers, leading to an out-of-bounds read vulnerability during file processing. By convincing a user or application to open a specially crafted NES Sound Format NSF music file, an attacker can cras...
CVE-2026-111131
A flaw was found in libxmp. An attacker could exploit an off-by-one stack out-of-bounds read in the P61A depacker by convincing a user or service to process a specially crafted audio module file. Successful exploitation could lead to an application crash, resulting in a Denial of Service DoS, or...
CVE-2026-96424 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...
CVE-2026-96424 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...
CVE-2026-96424 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...
