CVE-2026-43964: Off-by-one Error

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number...

CVE-2025-47406: Buffer Over-read

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size...

CVE-2025-47403: Buffer Over-read

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming...

CVE-2025-47401: Buffer Over-read

Transient DOS when processing target power rate tables during channel configuration...

CVE-2026-34059: Buffer Over-read

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

CVE-2026-37532: Buffer Over-read

AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library. In isotpcontinuereceive receive.c:87-89, the payloadlength for a Single Frame is extracted from a 4-bit nibble in the CAN frame data, yielding values 0-15. However, a standard CAN frame is only 8...

PT-2026-39530

SDL Simple DirectMedia Layer through 2.0.12 has a heap-based buffer over-read in Blit 3or4 to 3or4 inversed rgb in video/SDL blit N.c via a crafted .BMP file...

CVE-2026-6532: Buffer Over-read

Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

PT-2026-39348

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM memcpyvv in H5VM.c called from H5D compact readvv in H5Dcompact.c...

PT-2026-39361

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F addr decode len in H5Fint.c, resulting in the corruption of the instruction pointer...

PT-2026-39358

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM xstrdup in H5MM.c called from H5G ent to link in H5Glink.c...

PT-2026-39357

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O dtype encode helper in H5Odtype.c...

CVE-2026-6238: Buffer Over-read

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

PT-2026-38511

Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap reg.c and adaptmap.c...

PT-2026-38512

Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c...

PT-2026-38513

Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c...

PT-2026-38510

Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...

PT-2026-47323

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67 Description A buffer over-read occurs during outbound OCSP Online Certificate Status Protocol requests sent to an attacker-controlled OCSP server. A buffer over-read is a condition where a syste...

AZL-83621 CVE-2026-41677 affecting package 389-ds-base 3.1.1-12

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the frompemcallback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of...

CVE-2026-41677

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the frompemcallback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of...