1878 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-68355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11khalrxmsdulistget When the first entry ...
PT-2026-69755
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer underflow exists in the ath11k hal rx msdu list get function. This occurs when the first entry in msdu details contains a zero buffer address, leading the code to access msdu...
CVE-2026-68355: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11khalrxmsdulistget When the first entry in msdudetails has a zero buffer address, the code accesses msdudetailsi - 1 with i == 0, causing a buffer underflow. Fix similarly to...
RHEL 8 : java-1.8.0-ibm (RHSA-2026:52949)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:52949 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. Security Fixes: Little CMS: lcms...
CVE-2026-65819
CVE-2026-65819 affects gopacket before version 1.7.0, where multiple layer decoders may read attacker-controlled lengths, counts, or offsets before validating buffers. A crafted packet decoded via DecodingLayerParser or DecodeFromBytes can trigger an unrecovered panic, enabling unauthenticated re...
CVE-2026-16439
A flaw was found in Eclipse OpenJ9. When using the -Xtrace option to trace method arguments, a buffer underflow vulnerability can occur. This could potentially lead to memory corruption, impacting the integrity and availability of the application...
OESA-2026-3283 lmdb security update
Symas LMDB is an extraordinarily fast, memory-efficient database we developed for the OpenLDAP Project. With memory-mapped files, it has the read performance of a pure in-memory database while retaining the persistence of standard disk-based databases. Security Fixes: OpenLDAP Lightning...
EUVD-2026-54283
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...
SUSE CVE-2026-19028
H5Zfilterfletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a sizet underflow. This allows attackers to cause a denial ...
Linux Distros Unpatched Vulnerability : CVE-2026-16439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow. CVE-2026-16439 Note that Nessus relies on the...
CVE-2026-43628 llama.cpp b3978–b9058 Integer Underflow via DRY Sampler
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...
EUVD-2026-53676
H5Zfilterfletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a sizet underflow. This allows attackers to cause a denial o...
CVE-2026-43628: Integer Underflow (Wrap or Wraparound)
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...
PT-2026-68727
Name of the Vulnerable Software and Affected Versions llama.cpp versions b3978 through b9058 Description An integer underflow and out-of-bounds read issue exists in the DRY sampler. Unauthenticated attackers can trigger a heap buffer underflow by sending a crafted HTTP request to the...
CVE-2026-19028
H5Zfilterfletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a sizet underflow. This allows attackers to cause a denial o...
RLSA-2026:49512 Important: mingw-glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: GLib: Buffer underflow...
mingw-glib2 security update
An update is available for mingw-glib2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GLib provides the core application building blocks for libraries and...
glib: GLib: Buffer underflow in GVariant parser leads to heap corruption
A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...
IBM Java 7.1 < 7.1.5.31 / 8.0 < 8.0.8.70 Multiple Vulnerabilities
The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.31 / 8.0 prior to 8.0.8.70. It is, therefore, affected by multiple vulnerabilities as referenced in the IBM Security Update July 2026 advisory. - In Eclipse OpenJ9 versions up to 0.60, when executing class files where a...
