CVE-2026-19576 Stack out-of-bounds write in the Goodix GT911 touch controller driver from an unvalidated device-reported touch point count

The Goodix GT9xx input driver in drivers/input/inputgt911.c reads the touch point count from the controller's status register and masks it with GT911TOUCHPOINTSMSK 0x0F, yielding a value of 0..15. In gt911process that value is used directly as the loop bound for filling pointreg, a stack array...

CVE-2026-19576

The Goodix GT9xx input driver in drivers/input/inputgt911.c reads the touch point count from the controller's status register and masks it with GT911TOUCHPOINTSMSK 0x0F, yielding a value of 0..15. In gt911process that value is used directly as the loop bound for filling pointreg, a stack array...

CVE-2026-19576

The Goodix GT9xx input driver (specifically in drivers/input/input_gt911.c) contains a stack out-of-bounds write vulnerability. The driver reads a touch point count from the controller's status register and uses it directly as a loop bound for filling the point_reg[] stack array. Because the arra...

CVE-2026-19576 Stack out-of-bounds write in the Goodix GT911 touch controller driver from an unvalidated device-reported touch point count

The Goodix GT9xx input driver in drivers/input/inputgt911.c reads the touch point count from the controller's status register and masks it with GT911TOUCHPOINTSMSK 0x0F, yielding a value of 0..15. In gt911process that value is used directly as the loop bound for filling pointreg, a stack array...

CVE-2026-19669 Unbounded variable-length array in fuel gauge syscall verifiers allows kernel stack overflow from user mode

The user-mode syscall verifiers zvrfyfuelgaugegetprops and zvrfyfuelgaugesetprops in drivers/fuelgauge/fuelgaugesyscallhandlers.c declared two variable-length arrays, union fuelgaugepropval kvalslen and fuelgaugepropt kpropslen, sized directly by the caller-supplied len argument. len is an...

CVE-2026-19669 Unbounded variable-length array in fuel gauge syscall verifiers allows kernel stack overflow from user mode

The user-mode syscall verifiers zvrfyfuelgaugegetprops and zvrfyfuelgaugesetprops in drivers/fuelgauge/fuelgaugesyscallhandlers.c declared two variable-length arrays, union fuelgaugepropval kvalslen and fuelgaugepropt kpropslen, sized directly by the caller-supplied len argument. len is an...

CVE-2026-19669 Unbounded variable-length array in fuel gauge syscall verifiers allows kernel stack overflow from user mode

The user-mode syscall verifiers zvrfyfuelgaugegetprops and zvrfyfuelgaugesetprops in drivers/fuelgauge/fuelgaugesyscallhandlers.c declared two variable-length arrays, union fuelgaugepropval kvalslen and fuelgaugepropt kpropslen, sized directly by the caller-supplied len argument. len is an...

CVE-2026-19669

The Zephyr RTOS is vulnerable to a kernel stack overflow due to unbounded variable-length arrays (VLAs) in the z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() functions within drivers/fuel_gauge/fuel_gauge_syscall_handlers.c. An attacker can provide an unvalidated len argument via...

tpotce

T-Pot - La Plataforma Multi Honeypot Todo en Uno T-Pot es la plataforma honeypot todo en uno, opcionalmente distribuida, multiarquitectura amd64, arm64, que admite más de 20 honeypots y un sinfín de opciones de visualización utilizando Elastic Stack, mapas animados de ataques en vivo y muchas...

dsiem

Dsiem Dsiem es un motor de correlación de eventos de seguridad para ELK stack, que permite que la plataforma se utilice como un sistema SIEM dedicado y completo. Dsiem proporciona correlación al estilo OSSIM para registros/eventos normalizados, realiza consultas a fuentes de inteligencia de...

pbscan

RESUMEN polarbearscan es un intento de realizar un escaneo de puertos y captura de banners más rápido y eficiente. Combina dos ideas diferentes que, con suerte, lo harán merecedor de su atención y tiempo. La primera de estas ideas es utilizar escaneo SYN sin estado usando cookies criptográficamen...

bluez

BlueZ - Bluetooth-Protokollstack für Linux Copyright C 2000-2001 Qualcomm Incorporated Copyright C 2002-2003 Maxim Krasnyansky [email protected] Copyright C 2002-2010 Marcel Holtmann [email protected] Kompilierung und Installation Um die Bluetooth-Dienstprogramme zu kompilieren, benötig...

PT-2026-110219

The Goodix GT9xx input driver in drivers/input/input gt911.c reads the touch point count from the controller's status register and masks it with GT911 TOUCH POINTS MSK 0x0F, yielding a value of 0..15. In gt911 process that value is used directly as the loop bound for filling point reg, a stack...

CVE-2026-19576: Out-of-bounds Write

The Goodix GT9xx input driver in drivers/input/inputgt911.c reads the touch point count from the controller's status register and masks it with GT911TOUCHPOINTSMSK 0x0F, yielding a value of 0..15. In gt911process that value is used directly as the loop bound for filling pointreg, a stack array...

jsonorg-tp1

json.org CVE-2022-45688 verdadero positivo El proyecto ilustra CVE-2022-45688 en json.org -- hay una aplicación sencilla XML2JSONConverter para leer XML de la entrada, convertirlo a JSON e imprimirlo con formato bonito en la consola. Usando una entrada maliciosa, la aplicación falla con un...

ISAssignment02

Information Security Project — Submission Offensive & defensi...

glibc security, bug fix, and enhancement update

An update is available for glibc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

CVE-2026-17544-PoC

CVE-2026-17544 — PHP bcmath bccomp Out-of-Bounds-Write Stack-Smashing CVSS 9.8 Kritisch · CWE-787 · GHSA-x692-q9x7-8c3f Zusammenfassung bcstr2num in ext/bcmath/libbcmath/src/str2num.c mitgeliefertes libbcmath, PHP 8.4+ enthält einen Off-by-N-Out-of-Bounds-Write. Wenn die vom Benutzer angegebene...

RockyLinux 9 : glibc (RLSA-2026:79281)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:79281 advisory. glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791 glibc: glibc: Process abort due to invalid memory in wordexp...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service

Summary fast-xml-parser is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-27942, CVE-2026-26278, CVE-2026-33036 Vulnerability Details CVEID:CVE-2026-27942 DESCRIPTION: fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML fro...