Lucene search
+L

4760 matches found

BDU FSTEC
BDU FSTEC
•added 2026/04/03 12:00 a.m.•17 views

The vulnerability of the brcmf_pno_set_random() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pno.c file of the Broadcom wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the brcmfmac/pno.c function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac driver for Broadcom wireless connectivity in the Linux operating system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

5.5CVSS6.2AI score0.00257EPSS
SaveExploits0References20Affected Software3
Redos
Redos
•added 2026/04/01 12:00 a.m.•20 views

ROS-20260401-73-0012

A vulnerability in the pngimagefinishread function of the pngimagefinishread library for handling bitmap graphics in the PNG libpng format is related to writing beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by loading a...

7.1CVSS7.3AI score0.00259EPSS
SaveExploits4
Redos
Redos
•added 2026/04/01 12:00 a.m.•17 views

ROS-20260401-73-0014

A vulnerability in the pngimagefinishread function of the pngimagefinishread library for handling bitmap graphics in the PNG libpng format is related to writing beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by loading a...

7.1CVSS7.3AI score0.00259EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
•added 2026/04/01 12:00 a.m.•13 views

The vulnerability of the pgtable_l5_enabled() function in the arch/arm64/include/asm/pgtable.h module allows a hacker to trigger a service failure on the ARM 64-bit kernel-based Linux operating system.

The vulnerability of the pgtablel5enabled function in the arch/arm64/include/asm/pgtable.h module is related to the execution of operations beyond the buffer boundaries in 64-bit ARM processor-based Linux operating systems. Exploiting this vulnerability could allow an attacker to cause a service...

5.5CVSS7.3AI score0.00203EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/01 12:00 a.m.•13 views

The vulnerability of the ice_vc_cfg_q_quanta() function in the drivers/net/ethernet/intel/ice/ice_virtchnl.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the icevccfgqquanta function in the drivers/net/ethernet/intel/ice/icevirtchnl.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow...

7.1CVSS6.8AI score0.0018EPSS
SaveExploits0References8Affected Software1
Redos
Redos
•added 2026/04/01 12:00 a.m.•20 views

ROS-20260401-73-0013

A vulnerability in the pngimagefinishread function of the pngimagefinishread library for handling bitmap graphics in the PNG libpng format is related to writing beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by loading a...

7.1CVSS7.3AI score0.00259EPSS
SaveExploits4
Positive Technologies
Positive Technologies
•added 2026/04/01 12:00 a.m.•15 views

PT-2026-36434

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MGMT component where the mesh send function fails to verify that the bytes provided for the flexible adv data array match the embedded adv data len field...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/01 12:00 a.m.•13 views

The vulnerability of the lpfc_prep_embed_io() function in the drivers/scsi/lpfc/lpfc_sli.c module of the Linux operating system’s SCSI device support driver allows a hacker to cause a service failure.

The vulnerability of the lpfcprepembedio function in the drivers/scsi/lpfc/lpfcsli.c file of the Linux SCSI device support driver module is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7.2AI score0.00203EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/03/30 3:16 p.m.•15 views

CVE-2026-5164

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

6.7CVSS0.0016EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/30 3:02 p.m.•42 views

CVE-2026-5164

The CVE-2026-5164 entry describes a vulnerability in virtio-win where the RhelDoUnMap() function fails to properly validate the number of descriptors in an unmap request. This input validation flaw can be exploited by a local user who supplies an excessive number of descriptors, potentially causi...

6.7CVSS5.9AI score0.0016EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
•added 2026/03/30 3:02 p.m.•10 views

CVE-2026-5164 Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

6.7CVSS5.9AI score0.0016EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/30 3:02 p.m.•7 views

CVE-2026-5164

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

6.7CVSS6AI score0.0016EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/30 3:02 p.m.•50 views

CVE-2026-5164 Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

6.7CVSS0.0016EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/30 3:02 p.m.•14 views

CVE-2026-5164

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

6.7CVSS5.9AI score0.0016EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•3 views

CVE-2026-5164: Buffer Copy without Checking Size of Input

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

6.7CVSS5.9AI score0.0016EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/03/30 12:00 a.m.•12 views

The vulnerability of the macb_get_addr() function in the drivers/net/ethernet/cadence/macb_main.c file of the Ethernet network adapter driver from Cadence’s Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the macbgetaddr function in the drivers/net/ethernet/cadence/macbmain.c file of the Ethernet network adapter driver from Cadence’s Linux kernel lies in the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

8CVSS6.2AI score0.00616EPSS
SaveExploits0References19Affected Software2
Tenable Nessus
Tenable Nessus
•added 2026/03/30 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-5164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A loca...

6.7CVSS5.9AI score0.0016EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/03/30 12:00 a.m.•18 views

The vulnerability of Google Chrome’s WebGL component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s WebGL component is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created HTML page...

10CVSS8AI score0.00373EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/03/30 12:00 a.m.•15 views

The vulnerability of the WebAudio component in the Google Chrome browser, which allows a hacker to trigger a service failure.

The vulnerability of the WebAudio component in the Google Chrome browser is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

10CVSS8.4AI score0.00373EPSS
SaveExploits0References9Affected Software5
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•18 views

PT-2026-29035

Name of the Vulnerable Software and Affected Versions virtio-win affected versions not specified Description A flaw exists in virtio-win where the RhelDoUnMap function inadequately validates the number of descriptors supplied by a user during an unmap request. A local user could exploit this inpu...

6.7CVSS6AI score0.0016EPSS
SaveExploits0References8
Rows per page
Query Builder