15982 matches found
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...
Moderate: Red Hat Security Advisory: glib2 security update
An update for glib2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...
glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...
glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...
RHEL 8 : glib2 (RHSA-2026:65771)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65771 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
RHEL 8 : glib2 (RHSA-2026:65762)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65762 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
ROS-20260909-73-0125
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
RHEL 10 : glib2 (RHSA-2026:65767)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65767 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
RHEL 8 : glib2 (RHSA-2026:65769)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65769 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
RHEL 9 : glib2 (RHSA-2026:65763)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65763 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
The vulnerability of the keyctl_pkey_params_get_2() function in the security/keys/keyctl_pkey.c module of the Linux kernel’s key management component allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the keyctlpkeyparamsget2 function in the security/keys/keyctlpkey.c module, a component of the Linux kernel’s key management framework, is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise...
RHEL 9 : glib2 (RHSA-2026:65770)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65770 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
RHEL 9 : glib2 (RHSA-2026:65768)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65768 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
RHEL 7 : glib2 (RHSA-2026:65773)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65773 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
CVE-2025-15614
A flaw was found in ugrep. This vulnerability, a heap buffer over-read, occurs in the LZW decompressor when processing specially crafted .Z archive files. An attacker can provide a malicious .Z file, causing the decompressor to read beyond its allocated memory. This can lead to the application...
CVE-2026-83951
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-83949
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...