The vulnerability of the Thunderbird email client, related to reading data beyond the buffer in memory, allows attackers to cause a service failure.

The vulnerability of the Thunderbird email client relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the ceph_handle_authreply() function in the net/ceph/auth.c module of the Linux operating system allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module of the Linux kernel is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service...

The vulnerability of the JAR component in the Firefox web browser allows a hacker to trigger a service failure.

The vulnerability of the JAR component in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to induce a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2026-56136

NTFS-3G (through 2026.2.25) contains an out-of-bounds read in ntfs_ir_nill() in libntfs-3g/index.c. An attacker can trigger the flaw by mounting a malicious NTFS image and creating a file with a crafted name, potentially disclosing confidential information from the ntfs-3g process memory. The CVS...

The vulnerability in the `net/ipv6/ip6_fib.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/ipv6/ip6fib.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-80901

The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtio isr drivers/virtio/virtio common.c, the device-written vq-used-ringidx.id is used directly as an index into vq-recv cbs and vq-desc, which are both allocated with...

The vulnerability in the driver/crypto/intel/iaa/iaa_crypto_main.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/crypto/intel/iaa/iaacryptomain.c file of the Linux operating system is related to reading data from buffer values that exceed acceptable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `virtio_snd_pcm_in_cb` function in the `hw/audio/virtio-snd.c` component of the QEMU hardware emulation software allows a hacker to trigger a service failure.

The vulnerability of the virtiosndpcmincb function in the hw/audio/virtio-snd.c component of the QEMU hardware emulation software is related to the issue of writing operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the process_message_header() function in the net/ceph/messenger_v2.c module of the Linux kernel allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the processmessageheader function in the net/ceph/messengerv2.c module of the Linux kernel involves reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to reading data from buffers beyond their allowable limits. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability in the fs/erofs/fileio.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/erofs/fileio.c component of the Linux operating system relates to reading data from memory beyond its permitted limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to induce a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in its ability to trigger service interruptions when reading data beyond the permissible buffer size.

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a corrupted file...

The vulnerability of the HeifPixelImage::copy_image_to() function in the libheif/pixelimage.cc decoder and file format parser allows a hacker to execute arbitrary code.

The vulnerability of the HeifPixelImage::copyimageto function in the libheif/pixelimage.cc decoder and file format parser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the CrwMap::decode0x0805() function in the src/crwimage_int.cpp component of the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the CrwMap::decode0x0805 function in the src/crwimageint.cpp component of the Exiv2 media metadata management library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in its ability to trigger service interruptions when reading data beyond the permissible buffer size.

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20260824-73-0006

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...