9220 matches found
CVE-2026-42495
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-42494
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-62425
The Xen hypervisor contains a buffer overrun vulnerability in the libfsimage iso9660 handling component. Specifically, CVE-2026-62425 arises because the Rock Ridge CE record processing assumes a good size and offset from on-disk fields without proper validation. This issue can lead to privilege e...
CVE-2026-42494
The Xen hypervisor is vulnerable to a buffer overrun in the libfsimage ISO9660 driver. Specifically, the directory loop assumes a good record length, deriving lengths directly from attacker-controlled on-disk fields without validation. Exploiting this vulnerability may allow an attacker to increa...
CVE-2026-62424
The Xen hypervisor is vulnerable to a buffer overrun in libfsimage iso9660 handling. Specifically, the Rock Ridge NM record processing fails to validate the entry length from attacker-controlled on-disk fields, leading to potential exploitation. This issue impacts various distributions including ...
EUVD-2026-49774
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-62424
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-62425
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-42495
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-42494
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-62424 buffer overruns in libfsimage iso9660 handling
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-42494 buffer overruns in libfsimage iso9660 handling
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-42495
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-62423
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-62424
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
PT-2026-65467
This update for xen fixes the following issues: Update to version 4.20.3 jscPED-8907. Security issues fixed: - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling...
PT-2026-65462
Name of the Vulnerable Software and Affected Versions Xen hypervisor libfsimage affected versions not specified Description A memory out-of-bounds read issue exists in the iso9660 driver of the libfsimage library. An attacker could exploit this flaw to achieve privilege escalation. Recommendation...
OPENSUSE-SU-2026:11392-1 kubevirt1.8-container-disk-1.8.4-3.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-42494: Out-of-bounds Read
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-43773
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...