Lucene search
+L

9849 matches found

Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•17 views

PT-2026-37403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Insufficient headroom validation in the xdp umem reg function could result in inadequate space for receiving minimum-sized ethernet frames. This issue may lead to the corruption of skb...

8.5CVSS7.2AI score0.00135EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•20 views

PT-2026-35001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow exists in the jumbo frm chain-mode implementation within the stmmac network driver. The issue occurs when a packet has a small linear portion but a large total lengt...

9.8CVSS6.8AI score0.00459EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/03/31 11:28 p.m.•21 views

SUSE CVE-2026-5186

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

5.3CVSS5.2AI score0.00113EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/31 12:28 p.m.•18 views

CVE-2026-5186

A flaw was found in Nothings stb, affecting its Multi-frame GIF File Handler. A local attacker can exploit a double free vulnerability by manipulating a specific function within the stbimage.h file. This can lead to memory corruption, which may result in a denial of service, making the system...

5.3CVSS5.7AI score0.00113EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/31 9:31 a.m.•19 views

EUVD-2026-17340

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

5.3CVSS5.2AI score0.00113EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/03/31 9:31 a.m.•20 views

EUVD-2026-17337

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS5.6AI score0.00154EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/31 7:30 a.m.•13 views

CVE-2026-5186 Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

5.3CVSS5.2AI score0.00113EPSS
SaveExploits0References3
Mend
Mend
•added 2026/03/31 7:30 a.m.•11 views

CVE-2026-5186

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

5.3CVSS5.2AI score0.00113EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/31 7:16 a.m.•26 views

CVE-2026-5185

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS0.00154EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/03/31 7:16 a.m.•30 views

UBUNTU-CVE-2026-5185

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS5.5AI score0.00154EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/03/31 7:16 a.m.•16 views

CVE-2026-5185

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS5.6AI score0.00154EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/31 6:45 a.m.•12 views

CVE-2026-5185 Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS5.5AI score0.00154EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/31 6:45 a.m.•18 views

CVE-2026-5185

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS5.6AI score0.00154EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/31 12:00 a.m.•25 views

PT-2026-29202

A security flaw has been discovered in Nothings stb image up to 2.30. This affects the function stbi gif load next of the file stb image.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has...

5.3CVSS5.6AI score0.00154EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/03/31 12:00 a.m.•26 views

PT-2026-29203

Name of the Vulnerable Software and Affected Versions Nothings stb versions prior to 2.31 Description A flaw exists in Nothings stb up to version 2.30 related to the Multi-frame GIF File Handler component. Specifically, the issue resides within the stbi load gif main function of the stb image.h...

5.3CVSS5.5AI score0.00113EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•8 views

CVE-2026-5185: Heap-based Buffer Overflow

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS5.6AI score0.00154EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•8 views

CVE-2026-5186: Double Free

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

5.3CVSS5.2AI score0.00113EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/31 12:00 a.m.•25 views

PT-2026-38561

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Processing of HTTP/2 SETTINGS frames can lead to an infinite loop of writing CONTINUATION frames when a SETTINGS MAX FRAME SIZE with a value of 0 is received,...

9.8CVSS5.9AI score0.0084EPSS
SaveExploits0
EUVD
EUVD
•added 2026/03/30 9:31 p.m.•25 views

EUVD-2026-17176

A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOWUPDATE frames on stream 0 connection-level that cause the flow control window to exceed the maximum value of 2³¹-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up. This vulnerabili...

5.3CVSS6.3AI score0.00454EPSS
SaveExploits0References2
osv_azl
osv_azl
•added 2026/03/30 8:16 p.m.•13 views

AZL-81251 CVE-2026-21714 affecting package nodejs24 for versions less than 24.14.1-1

A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOWUPDATE frames on stream 0 connection-level that cause the flow control window to exceed the maximum value of 2³¹-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up. This vulnerabili...

5.3CVSS6.3AI score0.00454EPSS
SaveExploits0References1
Rows per page
Query Builder