382 matches found
CVE-2026-92239: Out-of-bounds Read
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
Astra Linux – Vulnerability in xwayland, xorg-server
A flaw was discovered in the X.Org X server. This integer underflow vulnerability, specifically related to the handling of the XKB compatibility map, allows an attacker with local or remote X11 server access to trigger a buffer read overflow. This can lead to memory safety violations and...
Astra Linux – Vulnerability in gst-plugins-good1.0
GStreamer is a library for constructing graphs of media-handling components. A OOB-read vulnerability has been identified in the gstwavparsesmplchunk function within gstwavparse.c. This function attempts to read 4 bytes from the data + 12 offset without checking if the size of the data buffer is...
Linux Distros Unpatched Vulnerability : CVE-2026-80985
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smcllcrmtdeleterkey and smcllcsaveaddlinkrkeys read the part of a v2 message that does not fit...
NewStart CGSL MAIN 7.02 : curl Vulnerability (NS-SA-2026-0092)
The remote NewStart CGSL host, running version MAIN 7.02, has curl packages installed that are affected by a vulnerability: - 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text...
Linux Distros Unpatched Vulnerability : CVE-2026-85769
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or...
gpac:fuzz_probe_analyze: Global-buffer-overflow in gf_ac4_substream_group_info
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6063460539236352 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5a4f0433c67c Crash Stat...
Google Chrome Heap Buffer Overflow Info Disclosure
The vulnerability in the Google Chrome web browser relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created HTML page...
LibXpm Buffer Overflow DoS
The vulnerability of the library for working with X Pixmap XPM files in LibXpm involves reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-70653 libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanlinereadold and read q-1 before any prior pixel exists. A crafted Radiance...
CVE-2026-70653 libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanlinereadold and read q-1 before any prior pixel exists. A crafted Radiance...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100131)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100131 advisory. In the Linux kernel, the following vulnerability has been resolved: netlabel: validate unlabeled address and mask attribute lengths netlblunlabeladdrinfoget used the...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100119)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100119 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLANULSTRING These attributes are evaluated as c-string passed to strcmp, but...
CVE-2026-72084 scsi: target: Bound PR-OUT TransportID parsing to the received buffer
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer corescsi3decodespeciport and corescsi3emulateregisterandmove hand the raw PERSISTENT RESERVE OUT parameter buffer to targetparseprouttransportid without tellin...
Linux Distros Unpatched Vulnerability : CVE-2026-68385
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csumpartial without vector facility Currently csumpartial calls csumcopy...
CVE-2026-68351
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read When the firmware sends a command response with a length mismatch, carl9170cmdcallback logs the mismatch and calls carl9170restart but then falls through to...
UBUNTU-CVE-2026-68388
In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3simplefallocaterange can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled,...
CVE-2026-20347
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in Mach-...
CVE-2026-20346
Summary: CVE-2026-20346 affects the PDF file format parser in ClamAV. The vulnerability arises from improper boundary checks during PDF content processing, leading to an out-of-bounds buffer read and memory corruption. Impact as described: An unauthenticated, remote attacker can submit a crafted ...
CVE-2026-71498
node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final bytes form a truncated incomplete multi-byte UTF-8 sequence could cause the native binding to read past the end of the allocated buffer while attempting to decode the final,...