CVE-2022-30136

CVE-2022-30136 Prueba de concepto de explotación remota de Windows Network File System autor: Ricardo Narvaja Solo con fines de demostración. El exploit completo funciona en sistemas Windows Server vulnerables. Consulta el artículo Análisis de CVE-2022-30136 “Vulnerabilidad de Windows Network Fil...

CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-

CVE-2026-11108 – Integer Overflow in Memory Allocator kmalloc Sim Program Code C // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return NULL; void ptr = malloctotal; if...

CVE-2026-47578

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect buffer size calculation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

EUVD-2026-90125

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect buffer size calculation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

ROS-20260930-73-0144

The vulnerability in the drivers/net/ethernet/google/gve/gveethtool.c and drivers/net/ethernet/google/gve/gvemain.c modules of the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-95509

The Qt for MCUs framework is vulnerable to an out-of-bounds read due to an incorrect buffer size calculation during String.arg() formatting. This issue specifically affects strings optimized for Latin-1 characters when displaying Latin-1 characters. The vulnerability can result in an out-of-bound...

CVE-2026-95509 Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...

ROS-20260928-73-0118

The vulnerability of the functions ah6outputdone and ah6output in the Linux kernel’s net/ipv6/ah6.c file is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : rsyslog vulnerability (USN-8786-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8786-1 advisory. It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote...

CVE-2026-88355

An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in newexpr. For arity-0 expression nodes, including constants, variables, and zero-argument functions, the function allocates less memory than sizeofteexpr but treats the returned allocation as a complete teexpr...

CVE-2026-88355

A vulnerability exists in tinyexpr (commit 4a7456e) within the new_expr() function due to an incorrect buffer size calculation . For arity-0 expression nodes, such as constants, variables, and zero-argument functions, the function allocates less memory than sizeof(te_expr) but treats the result a...

CVE-2026-88355

An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in newexpr. For arity-0 expression nodes, including constants, variables, and zero-argument functions, the function allocates less memory than sizeofteexpr but treats the returned allocation as a complete teexpr...

EUVD-2026-86286

An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in newexpr. For arity-0 expression nodes, including constants, variables, and zero-argument functions, the function allocates less memory than sizeofteexpr but treats the returned allocation as a complete teexpr...

CVE-2026-88355

An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in newexpr. For arity-0 expression nodes, including constants, variables, and zero-argument functions, the function allocates less memory than sizeofteexpr but treats the returned allocation as a complete teexpr...

ROS-20260924-73-0080

The vulnerability of the i40e components of the Linux operating system’s kernel is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

ROS-20260924-73-0050

The vulnerability of the net FailoverSelectQueue function in the drivers/net/net Failover.c module of the Linux kernel network device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-97863

Name of the Vulnerable Software and Affected Versions tinyexpr version 4a7456e Description An incorrect buffer size calculation occurs in the new expr function. For arity-0 expression nodes, such as constants, variables, and zero-argument functions, the function allocates less memory than the siz...

CVE-2026-88355: Undefined Security Weakness

An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in newexpr. For arity-0 expression nodes, including constants, variables, and zero-argument functions, the function allocates less memory than sizeofteexpr but treats the returned allocation as a complete teexpr...

ROS-20260923-73-0006

The vulnerability of the sctpgetsockoptpeerauthchunks function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a attacker to compromise the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002316 advisory. Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. Tenable has extracted the preceding description block directly from the Unity...