4 matches found
PT-2026-108724
Name of the Vulnerable Software and Affected Versions FalkorDB versions prior to 4.18.4 Description A heap-based out-of-bounds read occurs in the BufferSerializerIOv2 ReadBuffer function within src/serializers/serializer io.c. A remote attacker capable of issuing Redis replication commands can...
EUVD-2026-74297
MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, ReadBuffer.append in kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt writes every chunk of bytes received from the...
GHSA-QWGH-2VCV-G2F7 block_buffer: panic corrupts inline buffer position
Summary A caught panic may leave the cursor position of EagerBuffer or ReadBuffer in a corrupted state; this in turn allows out-of-bounds reads/writes. Details & PoC The following two tests fail miri: rust cfgmiri test fn eagerdigestblockspaniccorruptsinlineposition // EagerBuffer stores its curs...
PT-2026-83513
Summary A caught panic may leave the cursor position of EagerBuffer or ReadBuffer in a corrupted state; this in turn allows out-of-bounds reads/writes. Details & PoC The following two tests fail miri: rust cfgmiri test fn eager digest blocks panic corrupts inline position // EagerBuffer stores it...