CVE-2026-17195

CVE-2026-17195 is an out-of-bounds write vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker with low privileges to cause a denial of service . The CVSS 3.1 score is 6.5 (Medium) with a changed scope, reflecting the local attack vector and high availability imp...

CVE-2026-17195 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-17124

CVE-2026-17124 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . An out-of-bounds read flaw allows a local attacker with low privileges to execute arbitrary code , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/C...

CVE-2026-17124 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read...

CVE-2026-17007 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...

CVE-2026-17007

CVE-2026-17007 is an out-of-bounds read vulnerability affecting IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with low privileges can exploit it to obtain sensitive information or cause a denial of service . NVD scores it 7.1 (HIGH) with a local attack vector and low privileges ...

CVE-2026-17003

CVE-2026-17003 is an out-of-bounds write vulnerability in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 that allows a remote, unauthenticated attacker to compromise system confidentiality and integrity . The NVD rates it CVSS 9.1 (CRITICAL) with a network vector, low complexity, and no privileges ...

CVE-2026-17003 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write...

CVE-2026-16973

CVE-2026-16973 is an out-of-bounds read vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker with low privileges to disclose sensitive kernel memory . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector and no user interaction required. CISA SSVC asses...

CVE-2026-16973 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

CVE-2026-16958 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-16958

CVE-2026-16958 affects IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 . A remote attacker can trigger an out-of-bounds write leading to denial of service . NVD scores it 7.5 (HIGH) with a network attack vector, while IBM's CNA assessment rates it 6.5 (MEDIUM) with an adjacent network vector. No in-...

CVE-2026-55894 Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

EUVD-2026-63669

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

CVE-2026-55894

CVE-2026-55894 is an out-of-bounds read in the Capstone disassembly framework (≤ 6.0.0-Alpha9). The sh_disassemble() function in arch/SH/SHDisassembler.c computes an idx value from a raw 16-bit instruction without validating it against the active mode-specific decode[] function-pointer table. An ...

CVE-2026-55894 Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

CVE-2026-55894

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

CVE-2026-70653

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanlinereadold and read q-1 before any prior pixel exists. A crafted Radiance...

DEBIAN-CVE-2026-70653

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanlinereadold and read q-1 before any prior pixel exists. A crafted Radiance...

CVE-2026-43798

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...