Lucene search
+L

24103 matches found

EUVD
EUVD
added 4 days ago10 views

EUVD-2026-54290

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS6AI score0.00126EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 4 days ago10 views

Autodesk FBX SDK < 2020.3.10 Multiple Vulnerabilities (adsk-sa-2026-0010)

The version of FBX SDK installed on the remote host is prior to 2020.3.10. It is, therefore, affected by multiple vulnerabilities as referenced in the adsk-sa-2026-0010 advisory. - A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow...

7.8CVSS6.3AI score0.00145EPSS
SaveExploits0References3
OSV
OSV
added 5 days ago4 views

DEBIAN-CVE-2026-70631

FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates...

6.8CVSS5.6AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago10 views

CVE-2026-70631

FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates...

6.8CVSS0.00135EPSS
SaveExploits0References5
NVD
NVD
added 5 days ago7 views

CVE-2026-11803

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00136EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago40 views

CVE-2026-70631

FFmpeg vulnerable before 9.0: uninitialized heap memory read in the TIFF decoder (libavcodec/tiff.c) when decoding a crafted TIFF with a Deflate strip; tiff_unpack_zlib() allocates a full declared strip buffer but copies bytes unconditionally, exposing stale heap data in output. No remediation de...

6.8CVSS5.7AI score0.00135EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 5 days ago6 views

libXfont2: PCF Font Parsing Heap Buffer Overflow

A flaw was found in libXfont2. A specially crafted PCF Portable Compiled Format font file, when processed by libXfont2, can lead to a buffer overflow. This occurs because the font parsing process does not properly validate the size of a bitmap buffer against the glyph metrics provided in the...

8.8CVSS6.5AI score0.00428EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 5 days ago7 views

libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

A flaw was found in libXfont2. In the BitmapScaleBitmaps function, an integer overflow can occur when calculating the memory needed for font glyphs. This overflow leads to a heap buffer overflow, where a smaller-than-required memory buffer is allocated. A local attacker can exploit this by loadin...

8.8CVSS6.3AI score0.00381EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 5 days ago6 views

libXfont2: computeProps Property Buffer Heap Buffer Overflow

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...

8.8CVSS6.1AI score0.00373EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 5 days ago7 views

libXfont2: PCF Font Parsing Heap Buffer Overflow

A flaw was found in libXfont2. A specially crafted PCF Portable Compiled Format font file, when processed by libXfont2, can lead to a buffer overflow. This occurs because the font parsing process does not properly validate the size of a bitmap buffer against the glyph metrics provided in the...

8.8CVSS6.5AI score0.00428EPSS
SaveExploits0References4
EUVD
EUVD
added 5 days ago10 views

EUVD-2026-53678

The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 through 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap...

6.9CVSS5.7AI score0.00127EPSS
SaveExploits0References4
OSV
OSV
added 5 days ago6 views

DEBIAN-CVE-2026-19028

H5Zfilterfletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a sizet underflow. This allows attackers to cause a denial o...

6.8CVSS5.7AI score0.00127EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago10 views

CVE-2026-19028

H5Zfilterfletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a sizet underflow. This allows attackers to cause a denial o...

6.8CVSS0.00127EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 5 days ago11 views

Linux Distros Unpatched Vulnerability : CVE-2026-19026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - H5Zfilternbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cdvalues0 through cdvalues4 without validating that cdvalues is non-NULL or that cdnelmts is at...

6.8CVSS5.4AI score0.00127EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 5 days ago10 views

Linux Distros Unpatched Vulnerability : CVE-2026-19027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 through 2.3.0 advance a read index int...

6.9CVSS5.6AI score0.00127EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 5 days ago6 views

Linux Distros Unpatched Vulnerability : CVE-2026-19023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a...

6.8CVSS5.4AI score0.00117EPSS
SaveExploits0References3
NVD
NVD
added 6 days ago8 views

CVE-2026-19025

H5Olayoutdecode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial ...

6.8CVSS0.00117EPSS
SaveExploits0References1
OSV
OSV
added 6 days ago4 views

DEBIAN-CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.3AI score0.00117EPSS
SaveExploits0References1
OSV
OSV
added 6 days ago5 views

DEBIAN-CVE-2026-19025

H5Olayoutdecode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial ...

6.8CVSS5.5AI score0.00117EPSS
SaveExploits0References1
NVD
NVD
added 6 days ago9 views

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS0.00117EPSS
SaveExploits0References1
Rows per page
Query Builder