CVE-2025-20795

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from an out-of-bounds write due to improper input validation, which could result in local elevation of privilege...

PT-2026-1408

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Use After Free, Heap-based Buffer Overflow, Integer Overflow or Wraparound,...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets, which stems from an out-of-bounds write due to a lack of bounds checking, and could lead to local elevation of privilege...

PT-2026-1373

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interactio...

PT-2026-1368

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10184870 Description An out-of-bounds write issue exists due to a missing bounds check in the display component. Successful exploitation could allow a malicious actor who already has System privileges to gain local...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets, which stems from an out-of-bounds write due to a lack of bounds checking, and could lead to local elevation of privilege...

PT-2026-1382

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10315812 Description An out-of-bounds write issue exists in battery due to a missing bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User...

PT-2026-1383

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10315812 Description An out-of-bounds write issue exists due to a missing bounds check in battery. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets, which stems from an out-of-bounds write due to a lack of bounds checking, and could lead to local elevation of privilege...

PT-2026-1385

Name of the Vulnerable Software and Affected Versions mminfra affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a local attacker with System privileges to escalate their privileges. User interaction i...

PT-2026-1372

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a malicious actor to gain local system privileges, provided they already possess System...

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2026:0012-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0012-1 advisory. Security issues fixed: - CVE-2025-27466: NULL pointer dereference in the Viridian interface when...

SUSE-SU-2026:0012-1 Security update for xen

This update for xen fixes the following issues: Security issues fixed: - CVE-2025-27466: NULL pointer dereference in the Viridian interface when updating the reference TSC area bsc1248807. - CVE-2025-58142: NULL pointer dereference in the Viridian interface due to assumption that the SIM page is...

OOBW in utf_16le_to_utf_8_truncated() in libpcap

...

OOBR and OOBW in pcap_ether_aton() in libpcap

...

Exploit for Out-of-bounds Write in Google Chrome

CVE-2025-14174 Analysis: ANGLE Metal Staging Buffer Out-of-Bou...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the opSetSloti32 function of m3exec.h. An attacker can cause memory corruption by manipulating the execution flow locally. Remediation There is no fixed version for pywasm3. References - GitHub Issue - GitHub Issu...

SUSE CVE-2025-11961

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

PT-2026-26521

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description An out-of-bounds write issue exists in the V8 JavaScript engine within Google Chrome. This flaw could allow a remote attacker to exploit heap corruption through a specially crafted HTM...