CVE-2026-66733

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2025-38622

CVE-2025-38622 — Linux kernel UDP/GSO issue : The vulnerability occurs in the UDP receive path when a packet with virtio_net_hdr using SKB_GSO_UDP and a gso_size smaller than the UDP header can trigger a crash in skb_pull_rcsum, leading to a kernel BUG in net/core/skbuff.c and a local attacker ma...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A buffer error vulnerability exists in Contiki-NG versions prior to 4.8, which stems from not checking if the packet buffer is large enough to fit into the full UDP header structure...

Multiple Denial of Service Vulnerabilities in Hollysys' K-Series Master Controller Module K-CU01

Founded in 1993, HollySys is a provider of automation and information technology solutions. Multiple denial of service vulnerabilities exist in Hollysys' K-Series Master Controller module K-CU01. 1 A malformed ulMessageSize field in the UdpComHeader structure is malformed to send malformed packet...