CVE-2026-10773 Out-of-bounds read in DHCPv4 client message-type name lookup (net_dhcpv4_msg_type_name)

The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...

CVE-2026-54737

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype. This iss...

CVE-2026-63559

A flaw was found in open62541. An integer overflow in the UAVariant arrayDimensions product computation may allow a remote attacker to read memory outside of its allocated bounds. This could potentially lead to the disclosure of sensitive information...

EUVD-2026-51335

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

PT-2026-66832

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype. This iss...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the UAVariant arrayDimensions product computation process. An attacker can access out-of-bounds heap memory and potentially obtain sensitive information by sending specially crafted requests. Remediati...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the UAVariant arrayDimensions product computation process. An attacker can cause an out-of-bounds write by sending specially crafted input that triggers an integer overflow. Remediation Upgrade open625...

CVE-2026-65423

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

DEBIAN-CVE-2026-65423

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

UBUNTU-CVE-2026-65423

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

CVE-2026-63559

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

UBUNTU-CVE-2026-63559

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

CVE-2026-65423

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

CVE-2026-65423

The CVE concerns the open62541 library. Vulnerable: UA_Variant arrayDimensions product computation. Root cause: integer overflow that may cause an out-of-bounds write. Impact (per documents): network-accessible by remote attacker with low privileges, high impact to confidentiality, integrity, and...

CVE-2026-63559

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

CVE-2026-63559 o6 Automation open62541 Integer Overflow or Wraparound

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

SUSE CVE-2026-26933

Improper Validation of Array Index CWE-129 in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation CAPEC-153. An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger...

PT-2026-66619

Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description An integer overflow occurs during the UA Variant arrayDimensions product computation. This flaw allows a remote attacker to perform an out-of-bounds read of heap memory, which may lead to t...