181563 matches found
CVE-2026-98375
A flaw was found in the Linux kernel's Xen network frontend driver. This vulnerability allows a malicious host backend to cause a Denial of Service DoS by transmitting incoming network packets with an incomplete Ethernet header. Because the driver fails to verify that incoming packet buffers meet...
CVE-2026-98348
A flaw was found in the Linux kernel's libipw wireless driver. An attacker within Wi-Fi range can exploit this flaw by transmitting a malformed, abnormally short association response frame. Due to an improper packet length calculation, the driver performs an out-of-bounds memory read, which can...
EUVD-2026-96320
Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows authenticated partners to read Locked Folder asset metadata because sync queries do not exclude Locked visibility. Attackers with an active partner relationship can call POST...
EUVD-2026-96319
Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...
CVE-2026-108164
Open Source Social Network (OSSN) versions up to and including 10.1 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the components/OssnMessages/ossn_com.php component. This flaw allows authenticated users to bypass sender and recipient verification by requesting the ...
CVE-2026-108164 Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route
Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...
CVE-2026-103636
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103513
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
CVE-2026-103635
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
CVE-2026-103636 Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103636 Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
EUVD-2026-96309
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103636
The Apache DataSketches C++ library (repo: datasketches-cpp ) contains an out-of-bounds read vulnerability in the VarOpt union deserialization function. The var_opt_union::deserialize() function fails to properly validate the preamble of a non-empty union, potentially reading up to 24 bytes past ...
CVE-2026-103635 Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
CVE-2026-103635
The Apache DataSketches C++ library (repo: datasketches-cpp ) is vulnerable to an out-of-bounds read during the deserialization of compact Theta sketches . Specifically, the compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() functions read header fields without first ver...
CVE-2026-103635 Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
EUVD-2026-96308
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
EUVD-2026-96307
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
CVE-2026-103513
The Apache DataSketches C++ library (repository: datasketches-cpp ) is vulnerable to out-of-bounds read and write during CPC sketch deserialization. The root cause is a failure to validate the read position during decoding and a lack of validation for decoded row indices and header fields (includ...
CVE-2026-103513 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...