46 matches found
objdump-Out-Of-Bounds-write
GNU Binutils objdump — OOB書き込み → FSOP → 任意コード実行 対象: GNU Binutils 全バージョンからHEADまで — objdump 環境: Debian 13 Trixie, glibc 2.41, x8664 影響: 任意コード実行 経路: 細工されたELFファイルをobjdump -gで処理 ASLR: バイパス 決定論的mmapデルタ 謝辞 bikini 氏には、この発見に関する紹介とフェアプレイに心から感謝します。彼は素晴らしい人物で、お話しできて嬉しかったです。彼自身も素晴らしい発見をしています。彼の成果をぜひご覧ください！ 脆弱...
MAL-2026-14579 Malicious code in svelte-ui-dlx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de011fe8fbe406c62d909048d60d2619dbf85d8f8ec05079c8104d966e52a63 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in hydration-ui-dlx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76afa004355ba53a89056c6daff511bb4f41e2bd666e2a5592d033e079e5740 The package's main module contains a top-level IIFE that chmods 0o755 and detached-spawns dist/internal/math-calc.mjs, which is a Linux x8664 ELF...
Malicious code in svelte-ui-dlx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de011fe8fbe406c62d909048d60d2619dbf85d8f8ec05079c8104d966e52a63 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14577 Malicious code in hydration-ui-dlx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76afa004355ba53a89056c6daff511bb4f41e2bd666e2a5592d033e079e5740 The package's main module contains a top-level IIFE that chmods 0o755 and detached-spawns dist/internal/math-calc.mjs, which is a Linux x8664 ELF...
CVE-2026-18220
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
UBUNTU-CVE-2026-18220
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-18220
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-18220
The CVE-2026-18220 vulnerability affects the GNU binutils BFD library’s DLX ELF backend (source file bfd/elf32-dlx.c). The root cause is an insufficient bounds check in dlx_rtype_to_howto() on ELF32_R_TYPE(r_info) before indexing into dlx_elf_howto_table[], despite non-contiguous DLX relocation t...
CVE-2026-18220 Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-18220 Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-18220
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
EUVD-2026-50279
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-18220
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
PT-2026-65773
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlx rtype to howto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values v...
Linux Distros Unpatched Vulnerability : CVE-2026-18220
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF...
objdump-dlx-calc-poc
objdump dlx calc poc Small repro for an objdump -g crash-to...
EUVD-2026-25344
OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows. Attackers can replace approved local scripts before execution without invalidating the approval plan, allowing execution of modified script...
CVE-2026-41360
OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows. Attackers can replace approved local scripts before execution without invalidating the approval plan, allowing execution of modified script...