68 matches found
CVE-2025-62821
Extensiones de imágenes HEIF de Microsoft msheifstore.dll: Subasignación del búfer de origen en la ruta CopyPixels que conduce a lectura fuera de límites y violación de acceso DoS Al decodificar una imagen HEIF maliciosa a través de WIC, el códec msheif asigna un búfer de origen de 1 byte, pero...
Linux Distros Unpatched Vulnerability : CVE-2026-71973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers ca...
CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
DEBIAN-CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
UBUNTU-CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
CVE-2026-71973 U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
CVE-2026-71973 U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
CVE-2026-48095
CVE-2026-48095 7-Zip 是一款高压缩比的文件归档工具。26.00 及更早版本存在一个由 NTFS 压缩流缓冲区分配不足（GetCuSize 移位未定义行为）导致的堆缓冲区溢出漏洞，可能允许攻击者执行任意代码或导致应用程序崩溃。 NTFS 处理器中的 CInStream::GetCuSize 将压缩单元缓冲区大小计算为 UInt321 = 28 且 CompressionUnit == 4，则会使得指数变为 32，这属于未定义行为，在 x86/x64 上会崩溃，导致 inBuf 被分配为 1 字节。随后 ReadStreamFALSE 会以 64 KB 的迭代次数将高达...
Linux Distros Unpatched Vulnerability : CVE-2026-90358
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, x86: Fix trampoline stack size for 128-bit arguments btfdistillfuncproto accepts a function argument up to 16 bytes, so a 128-bit scalar such as int128...
EUVD-2026-82019
In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit arguments btfdistillfuncproto accepts a function argument up to 16 bytes, so a 128-bit scalar such as int128 reaches the x86 trampoline with argsize == 16. But the current...
Linux Distros Unpatched Vulnerability : CVE-2026-89579
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallba...
UBUNTU-CVE-2026-89579
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
CVE-2026-89579
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
CVE-2026-89579 bpf: Harden bloom filter sizing and indexing on 32-bit kernels
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
CVE-2026-89579
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
CVE-2026-89579 bpf: Harden bloom filter sizing and indexing on 32-bit kernels
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
EUVD-2026-76491
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
CVE-2026-89579
CVE-2026-89579 affects the Linux kernel's BPF bloom filter on 32-bit x86 systems. Two distinct flaws exist in bloom_map_alloc() when the computed bitmap reaches the U32_MAX fallback: (1) a 32-bit arithmetic wrap in DIV_ROUND_UP causes under-allocation of the bitmap, and (2) hash values in the ran...
PT-2026-90295
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF bloom filter implementation on 32-bit kernels within the bloom map alloc function. When the computed bitmap reaches the U32 MAX fallback case, two problems...