4482 matches found
CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...
CVE-2026-64268
CVE-2026-64268 concerns a Linux kernel vulnerability in the SIW (RDMA) path where Read Response segments could overrun the sink buffer. The issue resides in siw_qp_rx.c (siw_proc_rresp) which places inbound Read Response DDP segments at sge->laddr + wqe->processed and accumulates processed ...
PT-2026-64704
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA firewire isight component where the isight packet function fails to properly validate the frame count from a device iso packet. The function checks the count...
PT-2026-64489
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA siw driver where the siw proc rresp function fails to check the running total of inbound Read Response DDP segments against the sink buffer length on...
ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided
An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel...
The vulnerability of the Adobe Media Encoder application, related to writing beyond the buffer boundaries in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of Adobe Audition’s audio editor lies in its ability to record beyond the buffer limit in memory, allowing a hacker to execute arbitrary code.
The vulnerability of Adobe Audition is related to recording beyond the buffer limits in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Audition’s audio editor lies in its ability to record beyond the buffer limit in memory, allowing a hacker to execute arbitrary code.
The vulnerability of Adobe Audition is related to recording beyond the buffer limits in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to induce a service failure.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
EUVD-2026-46447
The MCTP-over-I2C+GPIO target binding in Zephyr subsys/pmci/mctp/mctpi2cgpiotarget.c processes pseudo-register writes from an I2C bus master byte-by-byte in mctpi2cgpiotargetwritereceived without validating the order or the receive buffer. In the affected versions the MCTPI2CGPIORXMSGADDR data...
PT-2026-62125
The MCTP-over-I2C+GPIO target binding in Zephyr subsys/pmci/mctp/mctp i2c gpio target.c processes pseudo-register writes from an I2C bus master byte-by-byte in mctp i2c gpio target write received without validating the order or the receive buffer. In the affected versions the MCTP I2C GPIO RX MSG...
Important: openvpn
Issue Overview: An attacker controlling an HTTP proxy or performing MITM on the plaintext pre-TLS proxy connection can trigger a single 0-byte overrun to a buffer on the stack by sending a crafted NTLM Type 2 challenge response. CVE-2026-11771 If the active TLS session has a pending dedicated ACK...
The vulnerability of the Active Directory Federation Services (ADFS) allows a perpetrator to trigger a service failure.
The vulnerability of Active Directory Federation Services AD FS is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
The vulnerability of the graphical user interface (GUI) of the FortiPAM identity management system, the FortiOS operating system, and the FortiProxy proxy server for protecting against internet attacks allows a perpetrator to execute arbitrary code.
The vulnerability of the graphical user interface GUI of the FortiPAM identity management system, the FortiOS operating system, and the FortiProxy proxy server for protecting against internet attacks is related to the execution of operations outside of the buffer in memory. Exploiting this...
The vulnerability of the Cisco RoomOS operating system, related to operations beyond the buffer in memory, allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the Cisco RoomOS operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the ImagingTgaRleEncode() function in the TgaRleEncode.c component of the Pillow image processing library allows a hacker to disclose protected information.
The vulnerability of the ImagingTgaRleEncode function in the TgaRleEncode.c component of the Pillow image processing library is related to the output of the operation outside the buffer. Exploiting this vulnerability could allow an attacker to disclose protected information through the generated...
The vulnerability of the PyImaging_MapBuffer() function in the src/map.c component of the Pillow image processing library allows a attacker to disclose protected information or cause service interruptions.
The vulnerability of the PyImagingMapBuffer function in the src/map.c component of the Pillow image processing library is related to the issue of the operation exceeding the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...
Уязвимость функции readSeparateStripsIntoBuffer() библиотеки LibTIFF, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Уязвимость функции readSeparateStripsIntoBuffer библиотеки LibTIFF связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации посредством специально созданных...