CVE-2026-3195 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)

A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730...

Exploit for Unchecked Input for Loop Condition in Isc Bind

CVE-2026-5950 - BIND 9 Resolver DoS Research notes and defens...

Unchecked Input for Loop Condition

Overview kafka-python is a Pure Python client for Apache Kafka Affected versions of this package are vulnerable to Unchecked Input for Loop Condition in the SCRAM authentication handling. An attacker can cause the client's event loop to freeze by supplying an excessively large iteration count...

ROS-20260609-73-0016

The vulnerability in Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via the unicodedata.normalize function. An attacker can cause excessive CPU consumption by submitting specially crafted Unicode input, potentially leading to service disruption. Remediation A fix was...

CVE-2026-25277 Buffer Copy Without Checking Size of Input in Secure Processor

Memory corruption while using Strongbox due to buffer overflow...

CVE-2026-41565

CryptX for Perl (versions

CVE-2026-5404 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

The vulnerability of the __ibmvnic_open() function in the drivers/net/ethernet/ibm/ibmvnic.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ibmvnicopen function in the drivers/net/ethernet/ibm/ibmvnic.c file of the Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the zstream_buffer_ungets() function in the zlib library, which allows an attacker to trigger a memory corruption.

The vulnerability of the zstreambufferungets function in the zlib library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause memory corruption remotely...

The vulnerability of the dump_zones() function in the drivers/md/raid0.c file of the Linux kernel driver for multiple device drivers (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dumpzones function in the drivers/md/raid0.c file of the Linux kernel-based device driver for multiple devices RAID and LVM is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability cou...

The vulnerability of the ext4_da_write_end() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4dawriteend function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

ROS-20260414-73-0051

A vulnerability in the btrfstruncateblock function of the fs/btrfs/inode.c module of the Linux kernel btrfs file system is related to buffer copying without checking the size of the input data classic buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of...

The vulnerability of the btrfs_truncate_block() function in the fs/btrfs/inode.c file of the file system module in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfstruncateblock function in the fs/btrfs/inode.c file of the Btrfs file system in Linux kernels is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mousevsc_on_receive() function in the drivers/hid/hid-hyperv.c file of the Linux kernel subsystem for user interface devices’ drivers allows a hacker to cause a service failure.

The vulnerability of the mousevsconreceive function in the drivers/hid/hid-hyperv.c file of the Linux kernel’s input device subsystem driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow...

The vulnerability of the snd_ymfpci_memalloc() function in the sound/pci/ymfpci/ymfpci_main.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the sndymfpcimemalloc function in the sound/pci/ymfpci/ymfpcimain.c module of the Linux kernel’s audio subsystem is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

Unchecked Input for Loop Condition

Overview github.com/0xJacky/Nginx-UI/settings is a yet another Nginx Web UI Affected versions of this package are vulnerable to Unchecked Input for Loop Condition due to improper input validation in the POST /api/settings handler for the logrotate.interval field. An attacker can make the web...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition due to improper input validation in the POST /api/settings handler for the logrotate.interval field. An attacker can make the web interface unresponsive by submitting a negative interval value, causing...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition due to improper input validation in the POST /api/settings handler for the logrotate.interval field. An attacker can make the web interface unresponsive by submitting a negative interval value, causing...

CVE-2026-25570

A vulnerability has been identified in SICAM SIAPP SDK All versions V2.1.7. The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service...