CVE-2026-65357: Buffer Copy without Checking Size of Input

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2026-84577: Buffer Copy without Checking Size of Input

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to bypass sandbox restrictions...

CVE-2026-87931: Buffer Copy without Checking Size of Input

A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from...

The vulnerability of the pdsfc_fw_rpc() function in the drivers/fwctl/pds/main.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the pdsfcfwrpc function in the drivers/fwctl/pds/main.c file of the Linux kernel is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-58823: Buffer Copy without Checking Size of Input

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-44756: Buffer Copy without Checking Size of Input

A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...

ROS-20260907-73-0059

The vulnerability in Erlang relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the `tap_get_user_xdp()` function in the `drivers/net/tap.c` file of the Linux kernel’s network device driver allows a attacker to cause a service failure.

The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel’s network device driver module is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the ccp_aes_complete() function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ccpaescomplete function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the kvm_vcpu_init_nested() function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmvcpuinitnested function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the build_i2c_fw_hdr() function in the drivers/usb/serial/io_ti.c file of the Linux device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the __ftrace_event_enable_disable() function in the kernel/trace/traceevents.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.

The vulnerability of the ftraceeventenabledisable function in the kernel/trace/traceevents.c module, which supports Linux operating system’s kernel tracing, is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the `iris_hfi_gen1_session_unset_buffers()` function in the `drivers/media/platform/qcom/iris/iris_hfi_gen1_command.c` driver for multimedia devices in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the irishfigen1sessionunsetbuffers function in the drivers/media/platform/qcom/iris/irishfigen1command.c driver for multimedia devices in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow...

SUSE CVE-2026-72304

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Fix TOCTOU in sofipc4bytesput In sofipc4bytesput, the copy size is derived from the old data-size in the buffer rather than the incoming new data's size field from ucontrol. If the new data has a differen...

CVE-2026-84126: Buffer Copy without Checking Size of Input

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-9625: Buffer Copy without Checking Size of Input

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

CVE-2026-83596: Buffer Copy without Checking Size of Input

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

CVE-2026-80578

A flaw was found in the Linux kernel's fbdev core. A local user could trigger an out-of-bounds read vulnerability in the fbioread function. This occurs due to a pointer desynchronization when handling partial copies from a faulty user buffer, allowing the system to read beyond intended memory...

The vulnerability of the amdxdna_cmd_get_payload() function in the drivers/accel/amdxdna/amdxdna_ctx.c driver for Linux kernel-based computing devices allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdxdnacmdgetpayload function in the drivers/accel/amdxdna/amdxdnactx.c driver for Linux computing devices relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker...

The vulnerability in the Firefox web browser, related to copying buffers without checking the input data, allows a hacker to trigger a service failure.

The vulnerability in the Firefox web browser relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...