CVE-2026-65423

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

UBUNTU-CVE-2026-65423

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

CVE-2026-63559

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

UBUNTU-CVE-2026-63559

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

CVE-2026-65423

The CVE concerns the open62541 library. Vulnerable: UA_Variant arrayDimensions product computation. Root cause: integer overflow that may cause an out-of-bounds write. Impact (per documents): network-accessible by remote attacker with low privileges, high impact to confidentiality, integrity, and...

CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

CVE-2026-65423

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

CVE-2026-63559 o6 Automation open62541 Integer Overflow or Wraparound

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

CVE-2026-63559

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

SUSE CVE-2026-26933

Improper Validation of Array Index CWE-129 in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation CAPEC-153. An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger...

EUVD-2026-51252

SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function...

PT-2026-66473

e107 prior to version 2.3.8 contains a code execution vulnerability in the e array deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the user prefs column. The e array::unserialize function in e107...

PT-2026-66526

SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function...

PT-2026-66619

Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description An integer overflow occurs during the UA Variant arrayDimensions product computation. This flaw allows a remote attacker to perform an out-of-bounds read of heap memory, which may lead to t...

CVE-2026-56850: Improper Authentication

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS mTLS client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

PT-2026-66621

Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description An integer overflow occurs during the arrayDimensions product computation within the UA Variant structure. This flaw allows a remote attacker to trigger an out-of-bounds write, which involv...

CVE-2026-10684

CVE-2026-10684 affects Zephyr's coredump print shell: in coredump_shell.c, print_coredump_hdr() uses the 16-bit tgt_code as an index into a fixed 7-element coredump_target_code2str[] without bounds checks, enabling an out-of-bounds read of a pointer to a string. A stored coredump with tgt_code &g...

GHSA-7C26-995W-6F47 veraPDF Parser DoS via PostScript Type 1 Font Programs

Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 1 font /FontFile is a font program containing attacker-supplied PostScript. veraPDF's Type 1 font...

veraPDF Parser DoS via PostScript CMap Streams

Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 0 font /Encoding or any /ToUnicode is a CMap stream containing attacker-supplied PostScript. veraPDF...