Lucene search
+L

487 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•5 views

CVE-2026-71382: Out-of-bounds Write

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.4AI score0.00256EPSS
SaveExploits0References3
Adobe
Adobe
•added 2026/08/25 12:00 a.m.•41 views

APSB26-121 : Security updates available for Substance 3D Sampler

Adobe has released an update for Adobe Substance 3D Sampler. This update addresses critical vulnerabilities that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

7.8CVSS7.5AI score0.00337EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
•added 2026/08/07 5:05 p.m.•18 views

SUSE CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/07 12:31 a.m.•25 views

EUVD-2026-54283

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/08/06 10:17 p.m.•27 views

DEBIAN-CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/06 10:17 p.m.•21 views

CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS0.00234EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/06 10:17 p.m.•15 views

CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/08/06 10:17 p.m.•24 views

UBUNTU-CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/06 3:45 p.m.•49 views

CVE-2026-43628 llama.cpp b3978–b9058 Integer Underflow via DRY Sampler

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS0.00234EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/06 3:45 p.m.•78 views

CVE-2026-43628

llama.cpp builds b3978–b9058 are affected by an integer underflow and out-of-bounds read in the DRY sampler. A crafted HTTP request with dry_allowed_length = INT32_MIN to /v1/completions or /v1/chat/completions can trigger a heap buffer underflow, enabling unauthenticated attackers to crash the s...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/08/06 3:45 p.m.•23 views

CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/08/06 3:45 p.m.•18 views

CVE-2026-43628 llama.cpp b3978–b9058 Integer Underflow via DRY Sampler

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/06 3:45 p.m.•20 views

CVE-2026-43628 llama.cpp b3978–b9058 Integer Underflow via DRY Sampler

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•9 views

CVE-2026-43628: Integer Underflow (Wrap or Wraparound)

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

8.5CVSS6.1AI score0.00234EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•12 views

PT-2026-68727

Name of the Vulnerable Software and Affected Versions llama.cpp versions b3978 through b9058 Description An integer underflow and out-of-bounds read issue exists in the DRY sampler. Unauthenticated attackers can trigger a heap buffer underflow by sending a crafted HTTP request to the...

8.5CVSS6.3AI score0.00234EPSS
SaveExploits0References12
EUVD
EUVD
•added 2026/07/17 5:08 p.m.•34 views

EUVD-2026-41921

vLLM has Remote DoS via Invalid Recovered Token Reinjection...

7.5CVSS7.3AI score0.00616EPSS
SaveExploits1References4
NVD
NVD
•added 2026/07/14 9:16 p.m.•22 views

CVE-2026-47475

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service...

6.2CVSS0.0016EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/14 8:08 p.m.•18 views

CVE-2026-47475

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service...

6.2CVSS5.8AI score0.0016EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/14 8:08 p.m.•37 views

CVE-2026-47475

Summary of CVE-2026-47475 (NVIDIA TensorRT-LLM) : A vulnerability in the OpenAI-compatible inference API could allow an attacker to trigger a reachable assertion in the sampler thread, potentially causing a denial of service. The issue is scoped to NVIDIA TensorRT-LLM, with local attack vector an...

6.2CVSS5.8AI score0.0016EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/14 8:08 p.m.•21 views

CVE-2026-47475

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service...

6.2CVSS5.8AI score0.0016EPSS
SaveExploits0References3
Rows per page
Query Builder