CVE-2026-38332

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...

CVE-2026-38332

TinyEXIF before 1.1.0 is affected by a heap-based buffer over-read in the EntryParser::Fetch methods, triggered via a crafted SubjectArea length in EXIF data. The vulnerability carries a CVSS 3.1 score of 2.9 (LOW) with a local attack vector, high complexity, no privileges required, and a low ava...

CVE-2026-38332

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...

CVE-2026-38332

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...

EUVD-2026-77112

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...

CVE-2019-19204

CVE-2019-19204 在 Oniguruma 6.x（6.9.4rc2 之前版本）中发现了一个问题。在 regparse.c 的 fetchintervalquantifier（原名为 fetchrangequantifier）函数中，调用 PFETCH 时未检查 PEND。这会导致基于堆的缓冲区过度读取。 研究人员：ManhND of The Tarantula Team, VinCSS（Vingroup 成员） 什么是 Oniguruma Oniguruma 由 K. Kosako 开发，是一个采用 BSD 许可的正则表达式库，支持多种字符编码。Ruby 编程语言（1.9...

Linux Distros Unpatched Vulnerability : CVE-2026-89588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining...

Linux Distros Unpatched Vulnerability : CVE-2026-89608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer si...

CVE-2026-80933

A flaw was found in the Linux kernel's mt76: mt7996 Wi-Fi driver. This vulnerability occurs because the driver does not properly validate the size of the default EEPROM Electrically Erasable Programmable Read-Only Memory firmware. A specially crafted, truncated EEPROM firmware file can cause the...

AZL-100728 CVE-2026-89526 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed chunk list. xdrcountreadsegments checks only 4-byte alignment;...

CVE-2026-89466

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGRSTRINGLEN bytes and leaves the destination...

CVE-2026-89466

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGRSTRINGLEN bytes and leaves the destination...

UBUNTU-CVE-2026-89466

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGRSTRINGLEN bytes and leaves the destination...

AZL-100734 CVE-2026-80933 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during...

CVE-2026-89608

CVE-2026-89608 affects the ecryptfs component of the Linux kernel. The function ecryptfs_parse_packet_set() calculates the remaining packet buffer size from PAGE_SIZE - 8 instead of the actual packet set buffer length, which can overstate the available buffer for version 1 headers . According to ...

CVE-2026-89588 ACPI: APEI: GHES: fix ARM section length accounting after header

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

CVE-2026-89466 power: supply: qcom_battmgr: terminate the strings from firmware

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGRSTRINGLEN bytes and leaves the destination...

EUVD-2026-76372

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGRSTRINGLEN bytes and leaves the destination...

CVE-2026-80933

This Linux kernel vulnerability affects the mt76: mt7996 Wi-Fi driver . The driver parses and copies the default EEPROM firmware without validating its length, so a truncated firmware file can cause the driver to read beyond the allocated buffer during variant validation or the fallback copy. Red...

CVE-2026-80933 wifi: mt76: mt7996: validate default EEPROM firmware size

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during...