136 matches found
CVE-2026-119720
A flaw was found in Blender. An attacker can entice a user to open a specially crafted .blend file containing a truncated data block. Because the application reads this block without validating its declared length, it triggers an out-of-bounds read operation, leading to an application crash and...
CVE-2026-111150
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBl...
EUVD-2026-102277
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBl...
CVE-2026-111150
The ValleyBell libvgm library (versions through commit a6eed945 ) contains a heap out-of-bounds read vulnerability within the PCM data-block decompressor. The root cause is an unbounded compression-table index ; specifically, a crafted .vgm file featuring a small type 0x7F table and wider compres...
CVE-2026-111150
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBl...
CVE-2026-111150: Out-of-bounds Read
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBl...
PT-2026-115156
Name of the Vulnerable Software and Affected Versions ValleyBell libvgm versions prior to commit a6eed945 Description The PCM data-block decompressor contains a heap out-of-bounds read issue caused by an unbounded compression-table index. An attacker can provide a specially crafted .vgm file...
SUSE CVE-2026-89830
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In allocatedatablock, when allocating a new data block dn-datablkaddr == NULLADDR, incvalidblockcount is called first to increment totalvalidblockcount and iblocks...
CVE-2026-89830 f2fs: fix valid block count leak on data block allocation failure
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In allocatedatablock, when allocating a new data block dn-datablkaddr == NULLADDR, incvalidblockcount is called first to increment totalvalidblockcount and iblocks...
CVE-2026-89830: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In allocatedatablock, when allocating a new data block dn-datablkaddr == NULLADDR, incvalidblockcount is called first to increment totalvalidblockcount and iblocks...
PT-2026-93471
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where a valid block count leak occurs during data block allocation failure. In the allocate data block function, when a new data block is being...
SUSE CVE-2026-68247
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...
CVE-2026-12363
The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...
CVE-2026-12363: Out-of-bounds Write
The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...
CVE-2026-68247
A flaw was found in the Linux kernel's drm/i915/bios component. This component, responsible for display-related operations, failed to perform a necessary range check on the paneltype2 field within the LFP Data Block. This oversight could result in the selection of an incorrect panel type,...
AZL-94835 CVE-2026-68247 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...
DEBIAN-CVE-2026-68247
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...
CVE-2026-68247
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...
CVE-2026-68247
The CVE-2026-68247 entry concerns the Linux kernel DRM i915 BIOS code where panel_type2 lacked a range check in the LFP Data Block, though panel_type was checked. The fix introduces range-checking helpers and uses them to validate panel_type2 and to improve clarity and correctness in panel type s...
EUVD-2026-55348
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...