PT-2026-31894

Name of the Vulnerable Software and Affected Versions Notepad++ version 8.9.3 Description A stack-based buffer overflow exists in the file drop handler component. When a user drags and drops a directory path of exactly 259 characters without a trailing backslash, the application appends a backsla...

ruby: Buffer overrun in String-to-Float conversion

A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...

ruby: Buffer overrun in String-to-Float conversion

A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...

The vulnerabilities of Firefox browsers, Firefox ESR, and Thunderbird email clients, Thunderbird ESR, are related to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in browsers Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WebGPU component in the Mozilla Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability of the WebGPU component in the Mozilla Firefox browser and the Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2019-25686 Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service

Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with an oversized buffer. Attackers can send a PBSZ command with a payload exceeding 211 bytes to trigger an access...

CVE-2026-23424 accel/amdxdna: Validate command buffer payload count

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space...

The vulnerability of the brcmf_pno_set_random() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pno.c file of the Broadcom wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the brcmfmac/pno.c function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac driver for Broadcom wireless connectivity in the Linux operating system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

ROS-20260401-73-0014

A vulnerability in the pngimagefinishread function of the pngimagefinishread library for handling bitmap graphics in the PNG libpng format is related to writing beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by loading a...

ROS-20260401-73-0012

A vulnerability in the pngimagefinishread function of the pngimagefinishread library for handling bitmap graphics in the PNG libpng format is related to writing beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by loading a...

The vulnerability of the ice_vc_cfg_q_quanta() function in the drivers/net/ethernet/intel/ice/ice_virtchnl.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the icevccfgqquanta function in the drivers/net/ethernet/intel/ice/icevirtchnl.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow...

The vulnerability of the pgtable_l5_enabled() function in the arch/arm64/include/asm/pgtable.h module allows a hacker to trigger a service failure on the ARM 64-bit kernel-based Linux operating system.

The vulnerability of the pgtablel5enabled function in the arch/arm64/include/asm/pgtable.h module is related to the execution of operations beyond the buffer boundaries in 64-bit ARM processor-based Linux operating systems. Exploiting this vulnerability could allow an attacker to cause a service...

ROS-20260401-73-0013

A vulnerability in the pngimagefinishread function of the pngimagefinishread library for handling bitmap graphics in the PNG libpng format is related to writing beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by loading a...

The vulnerability of the lpfc_prep_embed_io() function in the drivers/scsi/lpfc/lpfc_sli.c module of the Linux operating system’s SCSI device support driver allows a hacker to cause a service failure.

The vulnerability of the lpfcprepembedio function in the drivers/scsi/lpfc/lpfcsli.c file of the Linux SCSI device support driver module is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-36434

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MGMT component where the mesh send function fails to verify that the bytes provided for the flexible adv data array match the embedded adv data len field...

CVE-2026-5164

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

CVE-2026-5164

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

CVE-2026-5164

The CVE-2026-5164 entry describes a vulnerability in virtio-win where the RhelDoUnMap() function fails to properly validate the number of descriptors in an unmap request. This input validation flaw can be exploited by a local user who supplies an excessive number of descriptors, potentially causi...

CVE-2026-5164 Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...

CVE-2026-5164 Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

A flaw was found in virtio-win. The RhelDoUnMap function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. Th...