CVE-2026-16944 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-16944 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-16944

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable by a local attacker with high privileges to execute arbitrary code, yielding HIGH confidentiality, integrity, and availability impact (CVSS 6.7). No patch version or in-the-wild exploitation details are provide...

CVE-2026-16943 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-16943 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-16943

IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 are affected by a heap-based buffer overflow (CWE-787) exploitable by a local attacker with high privileges to execute arbitrary code (CVSS 8.2 HIGH, scope changed). Fixes are available via AIX SP13/TL-specific service packs and VIOS Fix Packs (4.1.0.50, 4.1....

CVE-2026-55893 Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

EUVD-2026-63673

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

CVE-2026-55893

Capstone (a disassembly framework) versions 6.0.0-Alpha9 and earlier contain a heap buffer overflow in the SH architecture disassembler (arch/SH/SHDisassembler.c). The SH floating-point decoders (opFADD, opFMUL, opFSUB) call set_reg() and set_reg_n() using sh_info.op.op_count without bounds-check...

CVE-2026-16936 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-55893 Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

CVE-2026-16936 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-16936

A buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to execute arbitrary code (CVSS 8.8, scope changed). No patch version or exploit details are provided in the documents.

CVE-2026-55893

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

EUVD-2026-63669

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

CVE-2026-55894

CVE-2026-55894 is an out-of-bounds read in the Capstone disassembly framework (≤ 6.0.0-Alpha9). The sh_disassemble() function in arch/SH/SHDisassembler.c computes an idx value from a raw 16-bit instruction without validating it against the active mode-specific decode[] function-pointer table. An ...

CVE-2026-55894 Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

CVE-2026-55894

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

CVE-2026-55894 Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

EUVD-2026-63668

Mailpit is an email testing tool and API for developers. From 1.29.0 until 1.30.6, Mailpit's server/server.go origin middleware checks the raw RequestURI for the /api/ prefix while Go's ServeMux routes using the percent-decoded URL path, and server/websockets/client.go configures...