148172 matches found
CVE-2026-75369
An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted CAN message...
EUVD-2026-65071
An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted CAN message...
CVE-2026-75369
An out-of-bounds read vulnerability exists in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software (commit eaf90ec). An attacker can supply a crafted CAN message to trigger a Denial of Service . The CNA-assigned CVSS 3.1 score is 7.1 (HIGH) with an adjacen...
CVE-2026-56136
NTFS-3G (through 2026.2.25) contains an out-of-bounds read in ntfs_ir_nill() in libntfs-3g/index.c. An attacker can trigger the flaw by mounting a malicious NTFS image and creating a file with a crafted name, potentially disclosing confidential information from the ntfs-3g process memory. The CVS...
ROS-20260824-73-0009
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause service failures and expose sensitive information...
CVE-2026-56136
In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...
The vulnerability of the GMP component in web browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to induce a service failure.
The vulnerability of the GMP component in Firefox ESR, Firefox, and the Thunderbird email client is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the JAR component in the Firefox web browser allows a hacker to trigger a service failure.
The vulnerability of the JAR component in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Thunderbird email client, related to reading data beyond the buffer in memory, allows a hacker to cause a service failure.
The vulnerability of the Thunderbird email client relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the `virtio_snd_pcm_in_cb` function in the `hw/audio/virtio-snd.c` component of the QEMU hardware emulation software allows a hacker to trigger a service failure.
The vulnerability of the virtiosndpcmincb function in the hw/audio/virtio-snd.c component of the QEMU hardware emulation software is related to the issue of writing operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the process_message_header() function in the net/ceph/messenger_v2.c module of the Linux kernel allows a hacker to gain access to protected information or cause a service failure.
The vulnerability of the processmessageheader function in the net/ceph/messengerv2.c module of the Linux kernel involves reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...
PT-2026-80901
The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtio isr drivers/virtio/virtio common.c, the device-written vq-used-ringidx.id is used directly as an index into vq-recv cbs and vq-desc, which are both allocated with...
The vulnerability of the do_layer_surface() function in the src/IMG_xcf.c component of the Simple DirectMedia Layer library allows a hacker to induce a service failure.
The vulnerability of the dolayersurface function in the src/IMGxcf.c component of the Simple DirectMedia Layer library is related to reading data beyond the acceptable buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created...
The vulnerability in the driver/crypto/intel/iaa/iaa_crypto_main.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the drivers/crypto/intel/iaa/iaacryptomain.c file of the Linux operating system is related to reading data from buffer values that exceed acceptable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to induce a service failure.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the CrwMap::decode0x0805() function in the src/crwimage_int.cpp component of the Exiv2 media metadata management library allows a attacker to cause a service failure.
The vulnerability of the CrwMap::decode0x0805 function in the src/crwimageint.cpp component of the Exiv2 media metadata management library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the HEIF and AVIF file encoding/decoding library lies in its ability to trigger service interruptions when reading data beyond the permissible buffer size.
The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a corrupted file...
The vulnerability of the HEIF and AVIF file encoding/decoding library lies in its ability to trigger service interruptions when reading data beyond the permissible buffer size.
The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2026-56136
In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...