redis-stack-CVE-2024-55656

CVE-2024-55656 - Redis Stack - RedisBloom 整数オーバーフローによるリモートコード実行の脆弱性 タイトル: Redis Stack RedisBloom 整数オーバーフローによるリモートコード実行の脆弱性 ZDI: ZDI-25-009 CVE: CVE-2024-55656 クレジット: rick2600 と gqsilva CVSS: 8.8 HIGH 影響を受けるバージョン: Redis Stack 7.2.0-v10 に同梱されている RedisBloom v2.6.12 分析（簡易版）...

CVE-2026-81882

A flaw was found in radare2. The binary property-list Unicode parser did not properly terminate strings, leading to an underallocation of memory. A local attacker could exploit this by providing specially crafted binary property-list data and executing specific commands pFB or pFBj. This could...

CVE-2026-81882

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The...

EUVD-2026-84470

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The...

PT-2026-96778

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0 Description The binary property-list Unicode parser underallocates an uninitialized UTF-8 destination and fails to guarantee NUL termination. This occurs when executing the pFB or pFBj commands on untrusted bina...

SUSE CVE-2026-80832

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

AZL-99567 CVE-2026-80832 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832

CVE-2026-80832 is a buffer underallocation flaw in the Linux kernel's QCE (Qualcomm Crypto Engine) crypto driver , specifically in qce_aead_ccm_prepare_buf_assoclen(). The AAD buffer size is computed as ALIGN(assoclen, 16) + MAX_CCM_ADATA_HEADER_LEN, while the DMA scatterlist length uses ALIGN(as...

EUVD-2026-71282

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

PT-2026-85710

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qce aead ccm prepare buf assoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated...

Linux Distros Unpatched Vulnerability : CVE-2026-80832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into t...

PT-2026-91340

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qce aead ccm prepare buf assoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated...

CVE-2026-80832: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003381 advisory. In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too fe...