Lucene search
+L

10330 matches found

Kitploit
Kitploit
•added 2026/11/12 8:40 a.m.•23 views

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Unleashing Mayhem over Bluetooth Low Energy This repository is part of a research outcome from theASSET Research Group. SweynTooth captures a family of 18 vulnerabilities across different Bluetooth Low Energy BLE software development kits SDKs of six major system-on-a-chip SoC vendor...

8.8CVSS7.5AI score0.01492EPSS
SaveExploits2References11
RedHat Linux
RedHat Linux
•added 2026/11/11 11:53 a.m.•4 views

kernel: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()

A flaw was found in the Linux kernel's dmaengine IDXD subsystem. A race condition during file-device setup failure cleanup in the idxdcdevopen function could lead to a deadlock, causing a denial of service. Furthermore, incorrect cleanup paths could result in operations on a freed memory context,...

7.8CVSS6.9AI score0.00122EPSS
SaveExploits0References5
osv_cleanstart
osv_cleanstart
•added 2026/11/11 12:38 a.m.•7 views

CLEANSTART-2026-JJ53461 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

Security vulnerability affects the argo-workflows package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources...

7.5CVSS7.4AI score0.00632EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/11/10 5:56 p.m.•70 views

GhostLock-GOT-W29

GhostLock GOT-W29 HUAWEI MatePad Pro 11(GOT-W29,SM8250 / Snapdragon 870,HarmonyOS 4.x, kernel 4.19.157-perf+)的 CVE-2026-43499 提权适配。 Current status: A 路线真机完成:合法 private root cred,SELinux 保持 u:r:shell:s0 持久 root broker:@glsu 完整 PTY root shell:Ctrl-C、方向键、后台作业控制均可用 arbitrary read 使用独立 random/uuid...

7.8CVSS7.5AI score0.05372EPSS
SaveExploits170References3
NVD
NVD
•added 2026/11/10 5:17 p.m.•6 views

CVE-2026-21407

Deadlock for some IntelR ArcTM B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access whe...

6.8CVSS0.00083EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/10 4:28 p.m.•7 views

EUVD-2026-121290

Deadlock for some IntelR ArcTM B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access whe...

6.8CVSS5.8AI score0.00083EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/10 4:28 p.m.•25 views

CVE-2026-21407

Deadlock for some IntelR ArcTM B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access whe...

6.8CVSS0.00083EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/10 4:28 p.m.•9 views

CVE-2026-21407

A deadlock vulnerability exists in the Ring 1: Device Drivers for certain Intel(R) Arc(TM) B-series graphics cards . An unprivileged software adversary with authenticated access and low complexity can trigger a denial of service (DoS) . While the attack may require special internal knowledge, it ...

6.8CVSS5.8AI score0.00083EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/11/10 10:26 a.m.•31 views

CVE-2026-36957

CVE-2026-36957: Denial of Service via HTTP Flood on Boa Web Server CVE ID: CVE-2026-36957 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: Shenzhen Dibit Network Equipment Co., Ltd. Product: Dbit Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The...

7.5CVSS6.2AI score0.00323EPSS
SaveExploits2
UbuntuCve
UbuntuCve
•added 2026/11/10 12:00 a.m.•5 views

CVE-2026-125191

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...

5.7CVSS5.7AI score0.00155EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/10 12:00 a.m.•5 views

CVE-2026-21407: n/a Intel(R) Arc(TM) B-series graphics cards: Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service

Deadlock for some IntelR ArcTM B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access whe...

6.8CVSS5.8AI score0.00083EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/11/10 12:00 a.m.•9 views

UBUNTU-CVE-2026-125191

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...

5.7CVSS5.7AI score0.00155EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/11/10 12:00 a.m.•6 views

UBUNTU-CVE-2026-125220

FFmpeg through 9.0.2 contains a deadlock vulnerability in mimicdecodeframe in libavcodec/mimic.c that fails to report frame progress when initgetbits8 fails. Attackers can supply a crafted file with an oversized Mimic intra frame followed by inter frames to hang frame-threaded decoding indefinite...

6.8CVSS6AI score0.00127EPSS
SaveExploits0References3
NVD
NVD
•added 2026/11/09 7:16 p.m.•6 views

CVE-2026-125220

FFmpeg through 9.0.2 contains a deadlock vulnerability in mimicdecodeframe in libavcodec/mimic.c that fails to report frame progress when initgetbits8 fails. Attackers can supply a crafted file with an oversized Mimic intra frame followed by inter frames to hang frame-threaded decoding indefinite...

6.8CVSS0.00127EPSS
SaveExploits0References5
NVD
NVD
•added 2026/11/09 7:16 p.m.•4 views

CVE-2026-125191

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...

5.7CVSS0.00155EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/11/09 7:11 p.m.•10 views

CVE-2026-125220 FFmpeg through 9.0.2 Mimic Decoder Deadlock via Frame Threading Failure

FFmpeg through 9.0.2 contains a deadlock vulnerability in mimicdecodeframe in libavcodec/mimic.c that fails to report frame progress when initgetbits8 fails. Attackers can supply a crafted file with an oversized Mimic intra frame followed by inter frames to hang frame-threaded decoding indefinite...

6.8CVSS5.9AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/11/09 7:11 p.m.•6 views

EUVD-2026-120309

FFmpeg through 9.0.2 contains a deadlock vulnerability in mimicdecodeframe in libavcodec/mimic.c that fails to report frame progress when initgetbits8 fails. Attackers can supply a crafted file with an oversized Mimic intra frame followed by inter frames to hang frame-threaded decoding indefinite...

6.8CVSS6AI score0.00127EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/11/09 7:11 p.m.•18 views

CVE-2026-125220 FFmpeg through 9.0.2 Mimic Decoder Deadlock via Frame Threading Failure

FFmpeg through 9.0.2 contains a deadlock vulnerability in mimicdecodeframe in libavcodec/mimic.c that fails to report frame progress when initgetbits8 fails. Attackers can supply a crafted file with an oversized Mimic intra frame followed by inter frames to hang frame-threaded decoding indefinite...

6.8CVSS0.00127EPSS
SaveExploits0References5
CVE
CVE
•added 2026/11/09 7:11 p.m.•12 views

CVE-2026-125220

Versions of FFmpeg through 9.0.2 are vulnerable to a deadlock vulnerability within the mimic_decode_frame() function located in libavcodec/mimic.c. The root cause is a failure to report frame progress when init_get_bits8() fails. A remote attacker can exploit this by providing a crafted file cont...

6.8CVSS6AI score0.00127EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/11/09 7:11 p.m.•19 views

CVE-2026-125191 FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count Leak

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...

5.7CVSS0.00155EPSS
SaveExploits0References5
Rows per page
Query Builder