CVE-2026-54333

CVE-2026-54333 is a stack out-of-bounds write in the uefi-firmware Python package (UEFI Firmware Parser). The vulnerable function MakeTable() in uefi_firmware/compression/Tiano/Decompress.c fails to validate that bit-length values from a crafted Tiano/EFI compressed firmware bitstream stay within...

CVE-2024-43630-POC

CVE-2024-43630-POC 此仓库包含一个POC，执行时会触发栈上越界写入，导致系统崩溃。该漏洞是一个非常有趣且罕见的遗物，展示了内核编程（尤其是对象管理）的复杂性和特殊性。此外，该漏洞影响Windows 11 24h2、Windows 10 22h2/21h2的内核，但不影响Windows 11 22h2/23h2，这更增添了其趣味性。 于2024年11月12日修补 受影响的Windows版本 Windows 11 版本 24H2 Windows 10 版本 22H2 Windows 10 版本 21H2 Windows Server 2025 Windows Server...

kernel: netfilter: conntrack: remove sprintf usage

A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...

CVE-2026-68516

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...

AZL-97091 CVE-2026-74669 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

AZL-91113 CVE-2026-55892 affecting package vim for versions less than 9.2.0735-1

Vim is an open source, command line text editor. Prior to 9.2.0662, the dumpprefixes function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefixes that apply to a word. The counter is bounded only by the trie structure itself; it is never check...

AZL-90216 CVE-2026-56114 affecting package dhcpcd for versions less than 10.0.8-2

dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6makemessage in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTIONPDEXCLUDE option body...

SUSE-SU-2024:2109-1 Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024157 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets bsc1220537. - CVE-2023-52628: Fixed 4-byte stack OOB write in nftables bsc1222118. -...

CVE-2023-52628 netfilter: nftables: exthdr: fix 4-byte stack OOB write

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv-len is a multiple of 4, then dstlen / 4 can write past the destination array which leads to stack corruption. This construct is necessary to clean the remainder of t...