Lucene search
+L

7194 matches found

RedhatCVE
RedhatCVE
added 7 hours ago3 views

CVE-2026-67306

A flaw was found in FreeRDP. An out-of-bounds read vulnerability exists in the RDP6 planar RLE bitmap decoder. A malicious or compromised Remote Desktop Protocol RDP server can send a specially crafted bitmap or surface update. This can cause the client to read beyond the intended memory buffer,...

5.4CVSS5.2AI score0.00277EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 9 hours ago9 views

gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation 4 blocksamples channels in gstwavpackdechandleframe causes a very small heap allocation. The WavPack library then writes...

7.6CVSS8.3AI score0.00361EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 9 hours ago6 views

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

7.6CVSS7.8AI score0.00361EPSS
SaveExploits0References2
NVD
NVD
added 12 hours ago5 views

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

8.7CVSS
SaveExploits0References2
Cvelist
Cvelist
added 14 hours ago8 views

CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

8.7CVSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 14 hours ago2 views

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

8.7CVSS5.4AI score
SaveExploits0References4Affected Software1
CVE
CVE
added 14 hours ago9 views

CVE-2026-12852

CVE-2026-12852 affects Bouncy Castle for Java prior to 1.85, where the MLS wire decoder allocates an attacker-declared opaque length before performing bounds checks. This is a vulnerability in the decoder component that could impact availability (per CVSS 4.0: AV:N/AC:L/AT:N/PR:N/UI:N/VI:N/SC:N/S...

8.7CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added 14 hours ago4 views

EUVD-2026-52137

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

8.7CVSS5.4AI score
SaveExploits0References2
CVE
CVE
added 14 hours ago14 views

CVE-2026-20464

Summary: CVE-2026-20464 affects the hevc decoder. An out-of-bounds write caused by an integer overflow could allow remote escalation of privilege to System level without user interaction. The issue is tied to the patch ALPS11104718 and Issue MSV-8297. Details from sources: The vulnerability is de...

5.7AI score
SaveExploits0References1
EUVD
EUVD
added 14 hours ago4 views

EUVD-2026-52054

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

5.7AI score
SaveExploits0References1
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-51835

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

5.4CVSS5.6AI score0.00277EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2 days ago7 views

CVE-2026-67306

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

5.4CVSS5.6AI score0.00277EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2 days ago25 views

CVE-2026-67290 FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

8.7CVSS0.00432EPSS
SaveExploits0References3
OSV
OSV
added 2 days ago5 views

CVE-2026-67290 FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

8.7CVSS5.7AI score0.00432EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago7 views

CVE-2026-67290

FreeRDP before 3.29.0 is affected by a heap out-of-bounds read in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. The vulnerability allows a remote attacker to crash a server by sending malformed media format data, exploiting fixed offsets without...

8.7CVSS5.7AI score0.00432EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2 days ago4 views

CVE-2026-67290

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

8.7CVSS5.7AI score0.00432EPSS
SaveExploits0References4
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-51865

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

8.7CVSS5.7AI score0.00432EPSS
SaveExploits0References3
EUVD
EUVD
added 3 days ago13 views

EUVD-2026-41113

ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow...

6.5CVSS5.5AI score0.0022EPSS
SaveExploits0References5
Cvelist
Cvelist
added 4 days ago31 views

CVE-2026-63550 MZ Automation libiec61850 Out-of-bounds Read

The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded element is received over an established MMS session TCP port 102, the decoder may advance its internal read position incorrectly, leading to a he...

7.1CVSS0.00249EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago21 views

CVE-2026-65421

CVE-2026-65421 affects the MMS BER decoder in the MMS/IEC 61850 stack (as noted in NVD and CVE lists). The flaw is an attacker-supplied length for fixed-width BER fields (boolean/integer) that is not validated, causing a read past the end of a heap buffer. This results in termination of the MMS s...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
Rows per page
Query Builder