149118 matches found
CVE-2026-18102
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...
CVE-2026-12634
The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...
CVE-2026-12633
The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...
CVE-2026-12634 Out-of-bounds stack write in the settings NVS backend from over-reported nvs_read length
The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...
CVE-2026-12633 Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisement
The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...
CVE-2026-12633 Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisement
The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...
CVE-2026-12633
CVE-2026-12633 is an out-of-bounds write in the Zephyr RTOS IPv6 neighbor-discovery code (subsys/net/ip/ipv6_nbr.c). The function handle_ra_6co() processes the 6LoWPAN Context Option (RFC 6775) from ICMPv6 Router Advertisements without bounding the 8-bit context_len field to the RFC maximum of 12...
EUVD-2026-62854
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...
CVE-2026-17015 IBM i Denial of Service
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...
CVE-2026-17015
IBM i versions 7.3 through 7.6 are affected by an out-of-bounds read (CWE-125) in the 5770-SS1 feature, allowing a remote authenticated attacker to cause a denial of service and obtain sensitive information. IBM rates the vulnerability CVSS 5.4 (MEDIUM) while the NVD assigns 8.1 (HIGH) , reflecti...
EUVD-2026-62853
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...
CVE-2026-18102
IBM i versions 7.3 through 7.6 (feature 5770-999) contain a heap-based buffer overflow (CWE-122) caused by an integer underflow during bounds checking . A remote authenticated attacker can exploit this to overwrite adjacent memory, resulting in a partial integrity impact. NVD rates it 4.3 MEDIUM ...
GHSA-9R55-P3JW-V652 vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-16914
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write...
CVE-2026-16903
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write...
CVE-2026-16909
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking...
CVE-2026-16891
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...
CVE-2026-16901
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...