157668 matches found
CVE-2026-102360
The lib0 library, versions 0.2.1-0.2.117 and 1.0.0-rc.32 and earlier, contains a missing bounds check in its binary decoder. Specifically, the readUint8Array function fails to compare the wire-supplied length against the decoder's own view. This allows an unauthenticated remote peer to perform an...
CVE-2026-102360 lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memory
A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...
EUVD-2026-88818
A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...
Out-Of-Bounds Read
zstd-jni is vulnerable to an out-of-bounds read. The vulnerability is due to the ZstdDictDecompress constructor not validating the offset and length arguments against the dictionary array bounds, which allows an attacker to provide arbitrary values to read memory beyond the supplied array and...
CVE-2026-96420
A flaw was found in Wireshark. An attacker could exploit this vulnerability by enticing a user to open a specially crafted Toshiba capture file, triggering a buffer over-read in the Toshiba file parser. This issue causes the application to crash, leading to a Denial of Service DoS. Mitigation...
CVE-2026-95509
The Qt for MCUs framework is vulnerable to an out-of-bounds read due to an incorrect buffer size calculation during String.arg() formatting. This issue specifically affects strings optimized for Latin-1 characters when displaying Latin-1 characters. The vulnerability can result in an out-of-bound...
CVE-2026-95509 Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs
Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...
CVE-2026-95509 Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs
Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...
CVE-2026-97408
A flaw was found in the Linux kernel's Bluetooth subsystem. The Logical Link Control and Adaptation Protocol L2CAP implementation fails to properly validate the payload length of connectionless frames before reading the Protocol/Service Multiplexer PSM field. An adjacent attacker within Bluetooth...
CVE-2026-97587
A flaw was found in the Linux kernel's RISC-V performance monitoring perf subsystem. On 32-bit RISC-V systems, the available counter mask was stored in a 32-bit data structure while the subsystem iterated over up to 64 counters, resulting in an out-of-bounds memory read. A local user could exploi...
Exploit for Out-of-bounds Read in Linux Linux_Kernel
Linux container escape PoCs Target-specific proof-of-concept...
CVE-2026-10518 Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with guest-level permissions to read private security policy content they were not authoriz...
CVE-2026-95392 Buffer Over-read in Wireshark
MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95392 Buffer Over-read in Wireshark
MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95392
Wireshark is affected by a buffer over-read vulnerability in the MBIM protocol dissector . This flaw impacts versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 , potentially allowing an attacker to cause a denial of service (DoS) . Remediation involves updating to the latest version, specifically 4.6.9 ...
CVE-2026-95392 Buffer Over-read in Wireshark
MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-96420 Buffer Over-read in Wireshark
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-96420 Buffer Over-read in Wireshark
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-96420
A buffer over-read vulnerability exists in the Toshiba file parser within Wireshark . This flaw can be exploited to cause a denial of service (DoS) . The affected versions include 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 . To remediate this issue, users should update to the latest version, specifically...