12539 matches found
kernel: net/sched: cls_u32: use skb_header_pointer_careful()
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a repro fooling u32classify: BUG: KASAN:...
PT-2026-34530
A panic was reachable when parsing certificate revocation lists via BorrowedCertRevocationList::from der or OwnedCertRevocationList::from der. This was the result of mishandling a syntactically valid empty BIT STRING appearing in the onlySomeReasons element of a IssuingDistributionPoint CRL...
Linux Distros Unpatched Vulnerability : CVE-2026-35366
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in...
Linux Distros Unpatched Vulnerability : CVE-2026-33813
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. CVE-2026-33813 Note that Nessus relies on the presence of the package as reported b...
TLSCheck 2.0: An Enhanced Memory Forensics Approach to Efficiently Detect TLS Callbacks
Memory analysis is a crucial technique in digital forensics that enables investigators to examine the runtime state of a system through physical memory dumps. While significant advances have been made in memory forensics, the detection and analysis of Thread Local Storage TLS callbacks remain...
Nimiq 输入验证错误漏洞
Nimiq is an open-source implementation of the Albatross protocol in Rust. Prior to Nimiq 1.3.0, there was a vulnerability related to input validation. This vulnerability stemmed from the use of BitSet.len in SkipBlockProof::verify, which calculates the for slot checks. This process involves...
CVE-2026-33813
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
UBUNTU-CVE-2026-33813
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
EUVD-2026-24247
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813
CVE-2026-33813 affects decoding of WEBP images in golang.org/x/image. The issue occurs when parsing a WEBP image with an invalid, large size on 32-bit platforms, causing a panic. Connected sources corroborate that this is a panic condition specific to large/invalid sizes on 32-bit architectures; ...
CVE-2026-33813 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
2026-04 .NET 10.0.7 Security Update for x64 Client (KB5091596)
2026-04 .NET 10.0.7 Security Update for x64 Client KB5091596...
2026-04 .NET 10.0.7 Security Update for x64 Server (KB5091596)
2026-04 .NET 10.0.7 Security Update for x64 Server KB5091596...
2026-04 .NET 10.0.7 Security Update for x86 Client (KB5091596)
2026-04 .NET 10.0.7 Security Update for x86 Client KB5091596...
Memory Allocation with Excessive Size Value
Overview golang.org/x/image/webp is a Package webp implements a decoder for WEBP images. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value. An attacker can cause a crash by supplying a WEBP image with an invalid, very large declared size, triggering a...