786047 matches found
CVE-2026-47235 SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array
SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcpapi.cpp loop over the JSON sockets array uses slotdata"sockets".Size without bounding gemidx by MAXGEMSLOTS, which is four in...
EUVD-2026-112147
SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcpapi.cpp loop over the JSON sockets array uses slotdata"sockets".Size without bounding gemidx by MAXGEMSLOTS, which is four in...
CVE-2026-93521 X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context...
EUVD-2026-112146
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context...
CVE-2026-93521
A heap buffer overflow exists in the X.Org X Server (versions before 2.1.25 ) and XWayland (versions before 24.4.14 ) within the RandR (Resize and Rotate extension) ChangeProviderProperty requests. The root cause is the incorrect calculation of buffer sizes and memory offsets when prepending or a...
CVE-2026-93521
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context...
CVE-2026-44179
The XWiki Pro Macros plugin (versions 1.13 until 1.14.5) contains a Remote Code Execution (RCE) vulnerability in the excerpt-include macro. The root cause is a failure to properly escape the included page's title in xwiki-pro-macros-ui/src/main/resources/Confluence/Macros/ExcerptInclude.xml, comb...
EUVD-2026-112144
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the excerpt-include macro does not properly escape the included page's title and executes excerpt content with the macro's rights. The title handling in...
CVE-2026-44179
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the "excerpt-include" macro does not properly escape the included page's title and executes "excerpt" content with the macro's rights. The title handling in...
CVE-2026-44179 XWiki Pro Macros: excerpt-include title and content injection executes code
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the excerpt-include macro does not properly escape the included page's title and executes excerpt content with the macro's rights. The title handling in...
EUVD-2026-112135
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context...
CVE-2026-93520
The X.Org X server and XWayland are vulnerable to a heap buffer overflow due to mismatching size calculations between XkbAllocNames and ChangeKeycodeRange . Specifically, key name memory is allocated with an insufficient buffer size compared to the maximum supported range in the X Keyboard Extens...
CVE-2026-93520 X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context...
CVE-2026-118375
llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...
CVE-2026-93519
A heap-based buffer overflow exists in the X.Org X server (before 21.1.25) and XWayland (before 24.1.14) when handling pointer barriers in the XFIXES extension . The vulnerability is caused by the server writing pointer barrier events into a fixed-size buffer without proper boundary validation. A...
CVE-2026-93519 X.Org Server XFixes Pointer Barrier Event List Buffer Overflow
A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context...
EUVD-2026-112123
A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context...
CVE-2026-93519 X.Org Server XFixes Pointer Barrier Event List Buffer Overflow
A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context...
CVE-2026-93518
The X.Org X server (before version 21.1.25) and XWayland (before version 24.1.14) are vulnerable to an integer truncation issue in the XkbResizeKeyType() function. This flaw occurs during memory allocation calculations within the X Keyboard Extension (XKB) , causing the server to allocate an unde...
EUVD-2026-112122
An integer truncation issue in XkbResizeKeyType that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server...