Lucene search
+L

618 matches found

Positive Technologies
Positive Technologies
•added 2026/05/19 12:00 a.m.•14 views

PT-2026-57347

Name of the Vulnerable Software and Affected Versions libde265 versions prior to 1.0.19 Description An issue exists in the decoder context::decode slice unit tiles function where the software reads pps.CtbAddrRStoTSctbAddrRS without validating the result against the size of the array. A malformed...

7.4CVSS6.5AI score0.00428EPSS
SaveExploits1References32
OSV
OSV
•added 2026/05/19 12:00 a.m.•15 views

MAL-2026-3840 Malicious code in @antv/x6-geometry (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/05/05 6:33 p.m.•13 views

EUVD-2026-27341

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

6.1CVSS6.6AI score0.00525EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/05 4:16 p.m.•35 views

CVE-2026-34000

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

9.1CVSS0.00525EPSS
SaveExploits0References27
OSV
OSV
•added 2026/05/05 4:16 p.m.•12 views

AZL-86211 CVE-2026-34000 affecting package xorg-x11-server 1.20.10-6

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

9.1CVSS6.6AI score0.00525EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/05 2:41 p.m.•94 views

CVE-2026-34000 Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

6.1CVSS0.00525EPSS
SaveExploits0References27
Vulnrichment
Vulnrichment
•added 2026/05/05 2:41 p.m.•11 views

CVE-2026-34000 Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

6.1CVSS6.6AI score0.00525EPSS
SaveExploits0References27
AlpineLinux
AlpineLinux
•added 2026/05/05 2:41 p.m.•22 views

CVE-2026-34000

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

9.1CVSS6.6AI score0.00525EPSS
SaveExploits0
CVE
CVE
•added 2026/05/05 2:41 p.m.•83 views

CVE-2026-34000

The CVE-2026-34000 issue affects the X.Org X server (Xwayland context) with an out-of-bounds read in XKB geometry processing, specifically in CheckSetGeom() and XkbAddGeomKeyAlias. An attacker with an X11 connection, locally or remotely, can read uninitialized/out-of-bounds memory and may crash t...

9.1CVSS6.6AI score0.00525EPSS
SaveExploits0References27Affected Software2
attackerkb
attackerkb
•added 2026/05/05 2:41 p.m.•59 views

CVE-2026-34000

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

9.1CVSS6.6AI score0.00525EPSS
SaveExploits0References28
RedhatCVE
RedhatCVE
•added 2026/05/05 2:41 p.m.•15 views

CVE-2026-34000

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

9.1CVSS6.6AI score0.00525EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•18 views

X.Org X Server 缓冲区错误漏洞

The X.Org X Server is an X Window system display server developed by the X.Org Foundation. The X.Org X Server has a buffer error vulnerability, which stems from out-of-bounds read accesses in the XKB geometry processing involving the CheckSetGeom and XkbAddGeomKeyAlias functions. This vulnerabili...

9.1CVSS6.9AI score0.00525EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•2 views

Rocky Linux: CVE-2026-34000: tigervnc (RLSA-2026-19342)

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and XkbAddGeomKeyAlias functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server,...

9.1CVSS6.6AI score0.00525EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/05/04 4:57 p.m.•18 views

CVE-2025-70070

A flaw was found in Assimp. A remote attacker can exploit this vulnerability by manipulating the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry function, leading to a denial of service DoS. This can make the affected system or application unavailable to legitimate users...

6.5CVSS5.9AI score0.00238EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/05/04 4:29 p.m.•19 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the MeshGeometry process in FBXMeshGeometry.cpp. An attacker can cause the application to crash or become unresponsive by providing specially crafted input files. Remediation There is no fixed version for...

8.8CVSS5.8AI score0.00238EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/04 3:16 p.m.•15 views

DEBIAN-CVE-2025-70070

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...

6.5CVSS6AI score0.00238EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/04 12:00 a.m.•11 views

CVE-2025-70070

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...

6.5CVSS6AI score0.00238EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/04 12:00 a.m.•42 views

CVE-2025-70070

A denial of service vulnerability exists in the Assimp library (versions up to 6.0.2 ) within the FBX Importer component. The flaw is located in the FBXMeshGeometry.cpp file, specifically within the MeshGeometry::MeshGeometry() method. A remote attacker can exploit this issue to cause a service i...

6.5CVSS6AI score0.00238EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/04 12:00 a.m.•22 views

Assimp 代码问题漏洞

Assimp is an open-source library developed by Assimp. It is used for importing and exporting various 3D model formats. Version 6.0.2 of Assimp contains a code vulnerability; this vulnerability originates from the MeshGeometry::MeshGeometry method in FBXMeshGeometry.cpp, which may allow a remote...

6.5CVSS6AI score0.00238EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/04 12:00 a.m.•18 views

EUVD-2025-209620

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...

6.5CVSS6AI score0.00238EPSS
SaveExploits0References2
Rows per page
Query Builder