4855 matches found
Amazon Linux 2023 : opensc (ALAS2023-2026-1988)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1988 advisory. OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by...
ADFS DoS
The vulnerability of Active Directory Federation Services AD FS is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Pillow MapBuffer Heap Buffer Overflow DoS
The vulnerability of the PyImagingMapBuffer function in the src/map.c component of the Pillow image processing library is related to the issue of the operation exceeding the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...
FortiPAM identity management GUI Code Execution
The vulnerability of the graphical user interface GUI of the FortiPAM identity management system, the FortiOS operating system, and the FortiProxy proxy server for protecting against internet attacks is related to the execution of operations outside of the buffer in memory. Exploiting this...
LibTIFF Heap Buffer Overflow DoS
Уязвимость функции readSeparateStripsIntoBuffer библиотеки LibTIFF связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации посредством специально созданных...
Cisco RoomOS Privilege Escalation
The vulnerability of the Cisco RoomOS operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
Pillow TgaRleEncode Disclosure
The vulnerability of the ImagingTgaRleEncode function in the TgaRleEncode.c component of the Pillow image processing library is related to the output of the operation outside the buffer. Exploiting this vulnerability could allow an attacker to disclose protected information through the generated...
CVE-2026-44436 Quicly is vulnerable to connection state corruption
Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack through connection state corruption. In QUIC Invariants, the maximum length of a Connection ID is 255 bytes, while QUIC...
CVE-2026-44436: Buffer Copy without Checking Size of Input
Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack through connection state corruption. In QUIC Invariants, the maximum length of a Connection ID is 255 bytes, while QUIC...
Qualcomm WLAN Firmware Buffer Overflow
The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...
Windows WLAN Host system Data Compromise
The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected informatio...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Adobe After Effects Heap Buffer Overflow
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Active Directory Domain Services Disclosure
The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...
Security update for glibc
This update for glibc fixes the following issues CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write bsc1263656. CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialized memory disclosure bsc1263658. Patch...
ipmi-oem DoS
The vulnerability of the ipmi-oem software for intra-band and out-of-band data transmission over the IPMI FreeIPMI protocol is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Resilient File System Code Execution
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
kernel: crypto: ccp - copy IV using skcipher ivsize
A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...
USN-8540-1 openvpn vulnerabilities
It was discovered that OpenVPN had a 1-byte buffer overrun when handling NTLMv2 proxy responses. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-11771 It was discovered that...
USN-8540-1: OpenVPN vulnerabilities
It was discovered that OpenVPN had a 1-byte buffer overrun when handling NTLMv2 proxy responses. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-11771 It was discovered that...