Lucene search
+L

244 matches found

osv_bit
osv_bit
•added 2026/10/21 8:56 a.m.•12 views

BIT-MYSQL-CLIENT-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

9.9CVSS8.6AI score0.00629EPSS
SaveExploits1References10
osv_bit
osv_bit
•added 2026/10/21 8:53 a.m.•9 views

BIT-MARIADB-MIN-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

9.9CVSS8.6AI score0.00629EPSS
SaveExploits1References10
osv_bit
osv_bit
•added 2026/10/21 8:52 a.m.•7 views

BIT-MARIADB-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

9.9CVSS8.6AI score0.00629EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2026/10/16 4:27 p.m.•5 views

CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

9.9CVSS6.5AI score
SaveExploits0References11
CVE
CVE
•added 2026/10/16 4:27 p.m.•48 views

CVE-2026-85746

The MariaDB server (versions 10.6.1-10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) is vulnerable to an out-of-bound buffer write in the ST_AsText function. This occurs during the conversion of deeply nested GeometryCollections because the recursive WKT serialization fails to reserve suff...

9.9CVSS8.6AI score0.00629EPSS
SaveExploits1References9Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/16 4:27 p.m.•9 views

CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

9.9CVSS8.6AI score0.00629EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2026/10/16 4:27 p.m.•78 views

CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

9.9CVSS0.00629EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•7 views

CVE-2026-111105: Numeric Truncation Error

Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

7CVSS7.6AI score0.00142EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/10/09 5:16 p.m.•19 views

UBUNTU-CVE-2026-107815

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

8.5CVSS6.4AI score0.00896EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•12 views

PT-2026-108223

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description An attacker with administrative privileges and access to the local management interface can execute arbitrary code...

7.2CVSS6.7AI score0.0021EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/10/07 5:19 p.m.•6 views

Integer Overflow or Wraparound

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/07 5:19 p.m.•9 views

Integer Overflow or Wraparound

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/07 5:19 p.m.•7 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/07 5:19 p.m.•6 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/07 5:19 p.m.•8 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/07 5:19 p.m.•9 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/07 5:19 p.m.•9 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the GetVirtualPixels function. An attacker can cause a crash of the server process by supplying crafted input that triggers an integer calculation error, resulting in a heap buffer write beyond...

5.9CVSS6AI score0.00135EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/25 12:00 a.m.•18 views

ROS-20260925-73-0132

The vulnerability of the nfqueue module in the Linux operating system’s kernel is related to out-of-buffer writing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.7AI score0.00176EPSS
SaveExploits0
Redos
Redos
•added 2026/09/18 12:00 a.m.•12 views

ROS-20260918-73-0008

The vulnerability of the kfdeventpageset function in the drivers/gpu/drm/amd/amdkfd/kfdevents.c module of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to out-of-buffer writing. Exploiting this vulnerability could allow an attacker to...

7.8CVSS7.1AI score0.00139EPSS
SaveExploits0
Redos
Redos
•added 2026/09/18 12:00 a.m.•15 views

ROS-20260918-73-0028

The vulnerability of the ip4ip6err function in the net/ipv6/ip6tunnel.c module of the Linux kernel is related to buffer out-of-buffer writing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9.8CVSS7.5AI score0.00563EPSS
SaveExploits0
Rows per page
Query Builder