CVE-2026-85444 MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted, isBraced, and isChevroned functions that strip whitespace but index using the original string length. Attackers can send NODEREPORT messages with leading or trailing whitespace to read past buffer bounds and access...

CVE-2026-85444 MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted, isBraced, and isChevroned functions that strip whitespace but index using the original string length. Attackers can send NODEREPORT messages with leading or trailing whitespace to read past buffer bounds and access...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2026-5450 DESCRIPTION: Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format wid...

CVE-2026-14678

A flaw was found in PostgreSQL. A buffer over-read vulnerability exists in the pgtrgm index picksplit function, which reads past the end of a heap buffer. This could allow a table maintainer to infer limited memory values by observing index split choices, leading to information disclosure...

PT-2026-85304

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description A buffer over-read occurs in CMOOSCommPkt during the deserialization of a four-byte packet, leading to out-of-bounds memory access. An attacker can exploit this by establishing a TCP connecti...

PT-2026-85293

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A buffer over-read occurs in the isQuoted, isBraced, and isChevroned functions. These functions strip whitespace from input but continue to index using the original string length, allowing an...

CVE-2026-71222: Out-of-bounds Read

A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...

Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-105544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105544 advisory. A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than...

PT-2026-85073

A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...

openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an...

openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an...

CVE-2026-18024

A flaw was found in PostgreSQL. A buffer over-read vulnerability in the ascii SQL function allows a user to disclose up to 3 bytes of memory after the end of a specific allocation by providing a specially crafted text value. This could lead to limited information disclosure. Mitigation To mitigat...

EUVD-2026-69709

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

The vulnerability of the Chromecast web browsers Google Chrome and Microsoft Edge allows a hacker to gain access to confidential data.

The vulnerability of Chromecast web browsers Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the NDR RDPEAR RDP-client parser allows a intruder to gain unauthorized access to protected information.

The vulnerability of the NDR RDPEAR RDP-client FreeRDP lies in the reading of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260902-73-0021

The vulnerability in perl-DBI is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-105541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105541 advisory. A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes...

MiracleLinux 8 : glib2-2.56.4-177.el8_10 (AXSA:2026-1730:14)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1730:14 advisory. glib: buffer over-read in glib/gvariant-serialiser.c via gvstupleisnormal CVE-2026-58010 glib: out-of-bounds read in glib/gdatetime.c:gdatetimegetym...

MiracleLinux 9 : nginx-1.20.1-28.el9_8.5.ML.1 (AXSA:2026-1735:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1735:07 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

The vulnerability of the SurfaceCapture component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data and also cause service interruptions.

The vulnerability of the SurfaceCapture component in Google Chrome and Microsoft Edge relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service interruptions through...