CVE-2026-102560: Out-of-bounds Read

A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow...

CVE-2026-102557: Out-of-bounds Read

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used th...

Linux Distros Unpatched Vulnerability : CVE-2026-94286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. CVE-2026-94286...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2026-3144)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3144 advisory. The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocke...

ROS-20260929-73-0201

The vulnerability of the irdmanetevent function in the drivers/infiniband/hw/irdma/utils.c file of the InfiniBand driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260929-73-0052

The vulnerability of the processmessageheader function in the net/ceph/messengerv2.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...

ROS-20260929-73-0057

The vulnerability of the mvm component in Linux kernel-based Wi-Fi modules is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260929-73-0189

The vulnerability of the decodepool function in the net/ceph/osdmap.c module, which implements kernel networking functions in the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

CVE-2026-95392: Buffer Over-read

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95293): chromium -- security fixes

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-102844

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 154.0.8037.92 Description An uninitialized resource in the GPU allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially crafted...

CVE-2026-102311: Use of Uninitialized Resource

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102318: Out-of-bounds Read

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102639: Signed to Unsigned Conversion Error

MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vulnerability in the MEOS binary and library WKB deserialization logic that allows unprivileged database users to crash the PostgreSQL backend process by supplying a crafted WKB payload with a negative length field. The negative...

Important: libheif

Issue Overview: Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-hh47-fhqr-cj2r CVE-2026-84450 Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an...

Amazon Linux 2 : libxml2 (ALAS-2026-3940)

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3940 advisory. A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing ...

Amazon Linux 2 : flatpak (ALAS-2026-3959)

The version of flatpak installed on the remote host is prior to 1.0.9-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3959 advisory. In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, whic...

Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

DTLS Retransmits Handshake Messages From a Stale Buffer Offset

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...

PT-2026-102807

Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.63.1 Description The client read authenticated function in russh/src/client/encrypted.rs forwards several channel subtypes—including CHANNEL DATA, CHANNEL EXTENDED DATA, CHANNEL EOF, CHANNEL CLOSE, CHANNEL OPEN FAILUR...