CVE-2026-75345

The software OpENer v2.3.0 (specifically commit 76b95cf ) is vulnerable to an out-of-bounds read located within the unconnected explicit messaging path. This security flaw allows a remote attacker to trigger a denial of service (DoS) . No specific remediation instructions or exploit details are p...

Linux Distros Unpatched Vulnerability : CVE-2026-44031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in DcmSequenceOfItems::read and DcmItem::read in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to...

SUSE SLES12 Security Update : libXtst (SUSE-SU-2026:4565-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4565-1 advisory. This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser bsc1281665. Tenable...

PT-2026-108770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the bpf sock destroy function. The issue arises because the function attempts to read the sk protocol variable from a socket object. However, when a...

CVE-2026-75351

OpENer v2.3/commit 76b95cf is susceptible to an out-of-bounds read vulnerability located in the server-side EtherNet/IP ForwardOpen connection-path parser . A remote attacker can exploit this flaw by sending a specially crafted connection request, which may trigger an application crash and result...

CVE-2026-98375: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

ROS-20261009-73-0388

The vulnerability of the vfeisr function in the drivers/media/platform/qcom/camss/camss-vfe-480.c driver for Linux multimedia devices is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-101094: Buffer Over-read

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

PT-2026-108929

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1 Description A heap out-of-bounds read occurs in the ogs pfcp parse dropped dl traffic threshold function. Remote unauthenticated attackers can read past Information Element IE buffers by sending short IEs. This ...

EUVD-2026-95901

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service...

CVE-2026-75346: Out-of-bounds Read

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service...

CVE-2026-107821: Improper Validation of Specified Index, Position, or Offset in Input

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

CVE-2026-75353

The OpENer v2.3 (commit 76b95cf) software contains an out-of-bounds read vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . This flaw could allow a remote attacker to trigger a denial of service condition. No specific exploit details or remediation steps are pro...

CVE-2026-75346

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service...

CVE-2026-107836: Out-of-bounds Read

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...

CVE-2026-75348: Out-of-bounds Read

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure when it parses recognized optional socket address information items of type...

CVE-2026-75348

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure when it parses recognized optional socket address information items of type...

CVE-2026-101130: Buffer Over-read

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-75346

The EIPStackGroup OpENer software (v2.3 and master through commit 76b95cf) contains an out-of-bounds read vulnerability in the server-side CIP SetAttributeList service. A remote attacker can exploit this by sending specially crafted network requests to trigger an invalid memory read, which can le...

CVE-2026-75348

An out-of-bounds read vulnerability exists in the EtherNet/IP TCP SendRRData Common Packet Format parser within EIPStackGroup OpENer v2.3 and master up to commit 76b95cf . The root cause is located in the CreateCommonPacketFormatStructure() function, which fails to validate that the remaining CPF...