Lucene search
+L

12914 matches found

Snyk
Snyk
•added 2026/02/25 7:24 p.m.•14 views

Buffer Over-read

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS6AI score0.00204EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/02/25 7:24 p.m.•14 views

Buffer Over-read

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.1CVSS6AI score0.00204EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/25 2:36 p.m.•7 views

CVE-2026-3203 Buffer Over-read in Wireshark

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service...

5.5CVSS7.2AI score0.00264EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•0 views

CVE-2026-3203: Buffer Over-read

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service...

7.5CVSS5.7AI score0.00264EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/02/24 9:09 p.m.•16 views

Security Bulletin: Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server affecting MongoDB Enterprised Advanced (CVE-2024-10921)

Summary There is a vulnerability in MongoDB Server used in MongoDB Enterprised Advanced for IBM, involving improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2024-10921 DESCRIPTION: An...

8.1CVSS5.7AI score0.00553EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•0 views

CVE-2026-25987: Out-of-bounds Read

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory...

9.1CVSS6.7AI score0.00443EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•0 views

CVE-2026-25576: Heap-based Buffer Overflow

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in multiple raw image format handles. The vulnerability occurs when processing images with -extract dimensions larg...

5.5CVSS6.1AI score0.00187EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•0 views

CVE-2026-26282: Buffer Over-read

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in .NET Single File bundle header parser due to missing bounds check. Opening a crafted file with NanaZip causes a crash or leaks heap data to the user...

6.6CVSS5.8AI score0.00163EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/17 1:30 p.m.•16 views

OSEC-2026-01 Buffer Over-Read in OCaml Marshal Deserialization

Summary A critical buffer over-read vulnerability in OCaml's Marshal deserialization runtime/intern.c enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock function, which performs unbounded memcpy operations usin...

6.8CVSS6.8AI score0.00311EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/11 7:44 p.m.•19 views

CVE-2026-20846

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...

7.5CVSS5.5AI score0.01392EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/10 5:51 p.m.•20 views

CVE-2026-20846

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...

7.5CVSS5.5AI score0.01392EPSS
SaveExploits0References2Affected Software22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•0 views

CVE-2026-20846: Buffer Over-read

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...

7.5CVSS7.3AI score0.01392EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/02/10 12:00 a.m.•14 views

Siemens SCALANCE and RUGGEDCOM Buffer Over-read (CVE-2024-6874)

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

4.3CVSS6.7AI score0.00786EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/02/04 12:00 a.m.•14 views

SUSE SLED15: libpng16-16 / libpng16-16-32bit / libpng16-compat-devel / etc (SUSE-SU-2026:0364-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0364-1 advisory. - CVE-2025-28162: memory leaks when running pngimage bsc1257364. - CVE-2025-28164: memory leaks...

7.1CVSS6.8AI score0.00217EPSS
SaveExploits3References7
CVE
CVE
•added 2026/02/02 3:20 p.m.•47 views

CVE-2025-47402

Technical details about CVE-2025-47402 are not publicly provided in the supplied documents. Monitor for updates from vendors and security bulletins.

6.5CVSS5.3AI score0.00149EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/02/02 3:20 p.m.•50 views

CVE-2025-47402 Buffer Over-read in WLAN Firmware

Transient DOS when processing a received frame with an excessively large authentication information element...

6.5CVSS0.00149EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/02 12:00 a.m.•0 views

CVE-2025-47402: Buffer Over-read

Transient DOS when processing a received frame with an excessively large authentication information element...

6.5CVSS5.7AI score0.00149EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•0 views

CVE-2026-24852: Heap-based Buffer Overflow

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, a heap buffer over-read when the strlen function attempts to read a non-null-terminated buffer potentially leaking heap memory...

8.1CVSS6.2AI score0.00265EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/22 10:59 a.m.•10 views

SUSE-SU-2026:20121-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in HeifPixelImage::overlay via crafted HEIF file that exercises the overlay image item path bsc1255735...

7.1CVSS5.9AI score0.0034EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/01/21 12:30 a.m.•17 views

CVE-2025-66692

A buffer over-read in the PublicKey::verify method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.8AI score0.00399EPSS
SaveExploits1References1
Rows per page
Query Builder