Lucene search
+L

874 matches found

RedhatCVE
RedhatCVE
added 2026/03/02 5:20 p.m.15 views

CVE-2026-3407

A flaw was found in YosysHQ yosys, specifically within the BLIF File Parser component. A local user can exploit a heap-based buffer overflow vulnerability by manipulating the Yosys::RTLIL::Const::set function. This manipulation can lead to a denial of service, making the affected system unavailab...

4.8CVSS5.9AI score0.00126EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/02 3:2 a.m.6 views

CVE-2026-3407

A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

4.8CVSS5.8AI score0.00126EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/03/02 3:2 a.m.35 views

CVE-2026-3407 YosysHQ yosys BLIF File rtlil.h set heap-based overflow

A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

4.8CVSS0.00126EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/03/02 3:2 a.m.11 views

EUVD-2026-9140

A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

4.8CVSS5.8AI score0.00126EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/03/02 12:0 a.m.10 views

PT-2026-22538

A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

4.8CVSS5.8AI score0.00126EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2026/03/01 12:32 p.m.5 views

CVE-2026-3394 jarikomppa soloud WAV File soloud_wav.cpp loadwav memory corruption

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloudwav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local...

4.8CVSS5.6AI score0.00172EPSS
SaveExploits1References6
CVE
CVE
added 2026/03/01 12:32 p.m.26 views

CVE-2026-3394

The CVE-2026-3394 entry concerns jarikomppa soloud up to 20200207, affecting SoLoud::Wav::loadwav in src/audiosource/wav/soloud_wav.cpp of the WAV File Parser. The vulnerability results in memory corruption when a manipulation is performed, with the attack requiring local access. Multiple sources...

7.8CVSS5.6AI score0.00172EPSS
SaveExploits1References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/01 12:32 p.m.12 views

CVE-2026-3394

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloudwav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local...

7.8CVSS5.6AI score0.00172EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2026/03/01 12:32 p.m.21 views

EUVD-2026-9129

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloudwav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local...

4.8CVSS5.6AI score0.00172EPSS
SaveExploits1References6
OSV
OSV
added 2026/03/01 12:32 p.m.12 views

CVE-2026-3394 jarikomppa soloud WAV File soloud_wav.cpp loadwav memory corruption

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloudwav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local...

4.8CVSS5.5AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/03/01 12:0 a.m.21 views

PT-2026-22516

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud wav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local...

4.8CVSS5.6AI score0.00172EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/03/01 12:0 a.m.11 views

SoLoud 缓冲区错误漏洞

SoLoud is a game audio engine developed by Jari Komppa personally. Versions of soloud 20200207 and earlier contained a buffer error vulnerability, which stemmed from memory corruption in the function located in the component WAV File Parser, specifically in the file...

7.8CVSS6AI score0.00172EPSS
SaveExploits1References7
NVD
NVD
added 2026/02/26 12:16 a.m.22 views

CVE-2026-27710

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a denial-of-service vulnerability exists in NanaZip’s .NET Single File Application parser. A crafted bundle can force an integer underflow in header-size calculation and trigger...

5.1CVSS0.00129EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.16 views

NanaZip 安全漏洞

NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1638.0, as well as versions before 6.5.1638.0, have security vulnerabilities. These vulnerabilities stem from the.NET Single File Application parser’s integer underflow in header size...

5.1CVSS5.8AI score0.00129EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/02/25 11:43 p.m.7 views

EUVD-2026-8768

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a denial-of-service vulnerability exists in NanaZip’s .NET Single File Application parser. A crafted bundle can force an integer underflow in header-size calculation and trigger...

5.1CVSS5.5AI score0.00129EPSS
SaveExploits1References1
OSV
OSV
added 2026/02/25 11:43 p.m.6 views

CVE-2026-27710 NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS)

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a denial-of-service vulnerability exists in NanaZip’s .NET Single File Application parser. A crafted bundle can force an integer underflow in header-size calculation and trigger...

5.1CVSS5.6AI score
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/02/25 12:26 a.m.7 views

SUSE CVE-2026-3102

A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be...

8.8CVSS5.5AI score0.03749EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2026/02/25 12:0 a.m.25 views

PT-2026-22044

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a denial-of-service vulnerability exists in NanaZip’s .NET Single File Application parser. A crafted bundle can force an integer underflow in header-size calculation and trigger...

5.1CVSS5.5AI score0.00129EPSS
SaveExploits1References2
NVD
NVD
added 2026/02/24 3:21 p.m.15 views

CVE-2026-3102

A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be...

8.8CVSS0.03749EPSS
SaveExploits2References7
ATTACKERKB
ATTACKERKB
added 2026/02/24 2:32 p.m.5 views

CVE-2026-3102

A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be...

8.8CVSS6.5AI score0.03749EPSS
SaveExploits2References8
Rows per page
Query Builder