CVE-2026-86243

A buffer over-read vulnerability exists in Apache Tomcat Native during the TLS handshake , which can allow a malicious user to trigger a Denial of Service (DoS) by causing a JVM crash . This vulnerability affects versions 1.3.0 through 1.3.8 and 2.0.0 through 2.0.15 , though earlier unsupported v...

CVE-2026-86243: Buffer Over-read

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected. Users are...

PT-2026-97309

Name of the Vulnerable Software and Affected Versions Apache Tomcat Native versions 1.3.0 through 1.3.8 Apache Tomcat Native versions 2.0.0 through 2.0.15 Description A buffer over-read occurs during the TLS handshake, which allows a malicious user to cause a Denial of Service DoS by triggering a...

CVE-2026-88344

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

CVE-2026-88345

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex dereferences the input pointer after it has reached the end of the buffer. A specially crafted...

CVE-2026-81883

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the...

UBUNTU-CVE-2026-81883

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the...

CVE-2026-81883

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the...

CVE-2026-81883

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the...

ROS-20260922-73-0114

The vulnerability in perl-Socket is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-88344

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

CVE-2026-88345

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e . The flaw is triggered when an exact-length FlatBuffers schema ends with an unterminated quotation mark , causing the C-string scanning logic in the lex() function to dereference the input pointer beyond the buffer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054072)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054072 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Tcopy in H5T.c. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000280 advisory. Buffer Over-read in GitHub repository vim/vim prior to 9.0.0218. Tenable has extracted the preceding description block directly from the Unity Linux security advisor...

CVE-2026-88344

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054070 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c. Tenable has extracte...

ROS-20260922-73-0107

The vulnerability in the 389-ds-base relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-88345: Out-of-bounds Read

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex dereferences the input pointer after it has reached the end of the buffer. A specially crafted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000573 advisory. Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glusterfs (UTSA-2023-001153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001153 advisory. In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. Tenable has extracted the preceding description bloc...