14387 matches found
CVE-2026-10773
The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...
CVE-2026-10773 Out-of-bounds read in DHCPv4 client message-type name lookup (net_dhcpv4_msg_type_name)
The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...
EUVD-2026-51868
The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...
CVE-2026-10773
The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...
CVE-2026-10773
Summary (CVE-2026-10773) : A bounds-check bug in Zephyr’s DHCPv4 client helper net_dhcpv4_msg_type_name() can read past the 8-element name table. The guard uses msg_type <= sizeof(name) instead of msg_type
CVE-2026-54737
@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype. This iss...
CVE-2026-63559
A flaw was found in open62541. An integer overflow in the UAVariant arrayDimensions product computation may allow a remote attacker to read memory outside of its allocated bounds. This could potentially lead to the disclosure of sensitive information...
EUVD-2026-51335
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
PT-2026-66832
@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype. This iss...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the UAVariant arrayDimensions product computation process. An attacker can access out-of-bounds heap memory and potentially obtain sensitive information by sending specially crafted requests. Remediati...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the UAVariant arrayDimensions product computation process. An attacker can cause an out-of-bounds write by sending specially crafted input that triggers an integer overflow. Remediation Upgrade open625...
DEBIAN-CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
UBUNTU-CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-63559
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
UBUNTU-CVE-2026-63559
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
CVE-2026-65423
The CVE concerns the open62541 library. Vulnerable: UA_Variant arrayDimensions product computation. Root cause: integer overflow that may cause an out-of-bounds write. Impact (per documents): network-accessible by remote attacker with low privileges, high impact to confidentiality, integrity, and...
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
