MiracleLinux 9 : grub2-2.06-104.el9_6.ML.1 (AXSA:2025-10402:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10402:07 advisory. grub2: reader/jpeg: Heap OOB Write during JPEG parsing CVE-2024-45774 grub2: commands/extcmd: Missing check for failed allocation CVE-2024-45775...

MiracleLinux 8 : redis:6 (AXSA:2025-10664:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10664:01 advisory. redis: Redis Unauthenticated Denial of Service CVE-2025-48367 redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability CVE-2025-32023 Tenable has...

Adobe Substance3D Modeler 缓冲区错误漏洞

Adobe Substance 3D Modeler is a software focused on 3D sculpting that allows users to create 3D models in both desktop and VR environments using digital clay-like intuitive tools.... Adobe Substance 3D Modeler suffers from an out-of-bounds write vulnerability that can be exploited by an attacker ...

PT-2026-2781

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler versions 1.22.4 and earlier Description Substance3D - Modeler is affected by an out-of-bounds write issue that may allow for arbitrary code execution with the privileges of the current user. Successful exploitation requir...

PT-2026-2788

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.0.3 and earlier Description The software contains an out-of-bounds write issue that may allow for arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to op...

Adobe Substance3D Sampler 缓冲区错误漏洞

Adobe Substance3D Sampler is a software for rendering 3D scenes from Audobee Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Sampler 5.1.0 and prior versions, which stems from an out-of-bounds write and could lead to the execution of arbitrary code...

MiracleLinux 9 : redis-6.2.19-1.el9_6 (AXSA:2025-10646:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10646:03 advisory. redis: Redis Unauthenticated Denial of Service CVE-2025-48367 redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability CVE-2025-32023 Tenable has...

MiracleLinux 9 : redis:7 (AXSA:2025-10675:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10675:01 advisory. redis: Redis Stack Buffer Overflow CVE-2025-27151 redis: Redis Unauthenticated Denial of Service CVE-2025-48367 redis: Redis Hyperloglog...

MiracleLinux 8 : webkit2gtk3-2.46.6-2.el8_10.ML.1 (AXSA:2025-9774:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9774:06 advisory. webkitgtk: out-of-bounds write vulnerability CVE-2025-24201 Tenable has extracted the preceding description block directly from the MiracleLinux security...

K000159059: Linux kernel vulnerability CVE-2024-56614

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controlled signed integer k. Due to implicit...

CUPS: Local denial-of-service via cupsd.conf update and related issues

A flaw was found in cups. A user in group defined by SystemGroup directive in /etc/cups/cups-files.conf can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write...

CVE-2025-53470 Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver

Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue affects Apache NimBLE: through 1.8. This issue requires a broken or bogus Bluetooth controller and thus severity is considered low. Users are...

Updated libpcap packages fix security vulnerability

OOBR and OOBW in pcapetheraton in libpcap. CVE-2025-11961...

MGASA-2026-0005 Updated libpcap packages fix security vulnerability

OOBR and OOBW in pcapetheraton in libpcap. CVE-2025-11961...

CVE-2026-21897

CryptoLib (NASA Open Source) exposes an out-of-bounds write in Crypto_Config_Add_Gvcid_Managed_Parameters prior to version 1.4.3. The function only checks whether gvcid_counter > GVCID_MAN_PARAM_SIZE, allowing up to 251 entries and causing a write past the end of gvcid_managed_parameters_array...

Exploit for Out-of-bounds Write in Google Chrome

No d...

CVE-2023-29074

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2023-29075

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2023-49355

decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " -1.2e-1111111111" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation...

CVE-2023-45775

In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...