CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Beschreibung Die Low-Level-Treiber GPCIDrv und GDrv in GIGABYTE APP Center v1.05.21 und früher, AORUS GRAPHICS ENGINE vor 1.57, XTREME GAMING ENGINE vor 1.26 und OC GURU II v2.08 legen Funktionen zum Lesen und Schreiben von beliebigem physischem Speicher offen. Dies...

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & Forschung zu CVE-2025-7026/7027/7028/7029 Statisches Reverse-Engineering eines GIGABYTE H510M K V2 H510MKV2.F3 BIOS-Images: vollständige UEFI-Firmware-Volume-Extraktionsanalyse des PI-Spezifikations-SMM-Core-Speicher- Allokators und eine gezielte...

CVE-2018-19320-LPE

CVE-2018-19320 LPE शोषण विवरण CVE-2018-19320 का स्थानीय विशेषाधिकार वृद्धि शोषण। यह शोषण gdrv.sys में उजागर फ़ंक्शनों का उपयोग करता है जो निम्न-स्तरीय उपयोगकर्ता को विशेषाधिकारों को SYSTEM तक बढ़ाने के लिए मेमोरी में डेटा आवंटित और लिखने की अनुमति देते हैं। स्क्रीनशॉट परीक्षण किया गया: Windows 10...

CVE-2018-19323

CVE-2018-19323: GIGABYTE GDrv Exploitation Framework Übersicht Dieses Repository enthält ein vollständiges und fortschrittliches Exploitation Framework für CVE-2018-19323 , eine kritische Sicherheitslücke im GIGABYTE gdrv.sys Treiber. Diese Schwachstelle ermöglicht es unprivilegierten Benutzern,...

CVE-2018-1932X

CVE-2018-1932X Rust Exploit POC per GIGABYTE APP Center v1.05.21 e precedenti Solo perché il tuo target non è memory safe non significa che il tuo exploit debba esserlo! Vulnerabilità utilizzate: CVE-2018-19320 - funzionalità ring0 simile a memcpy CVE-2018-19323 - lettura e scrittura dei Machine...

CVE-2018-19320

CVE-2018-19320 Explorando funcionalidade semelhante a memcpy do ring0 para desabilitar o Driver Signing Enforcement DSE conforme documentado aqui: http://deniable.org/windows/windows-callbacks Referências https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

JLSEC-2026-1155 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in...

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

CVE-2026-66913

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

CVE-2026-63091

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...

EUVD-2026-45961

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...

CVE-2026-63091

ProFTPD mod_sftp in versions before 1.3.9c and 1.3.10rc3 contains a signed integer overflow in the SCP size-record parser. An authenticated, low-privilege attacker can send a crafted file size (UINT64_MAX) to produce a negative off_t, convert to uint32_t, and trigger ~4 GB read length, causing th...

CVE-2026-63879

The CVE-2026-63879 entry relates to the Linux kernel DRM/AMDGPU stack, where a race in amdgpu_hmm_range_get_pages could allow operations on invalid pages due to reading the notifier sequence more than once. The issue has been resolved by a patch that fixes the range getter and also tidies coding ...

CVE-2026-63879 drm/amdgpu: fix amdgpu_hmm_range_get_pages

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpuhmmrangegetpages The notifier sequence must only be read once or otherwise we could work with invalid pages. While at it also fix the coding style, e.g. drop the pre-initialized return value and use the comm...

CVE-2026-9492

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

CVE-2026-9492 GIGABYTE｜Gigabyte Control Center - Improper Access Control

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

CVE-2026-9492

CVE-2026-9492 affects Gigabyte Control Center (GCC) MBStorage DRAM lighting control module. The vulnerability resides in the MyPortIO_x64.sys driver, where improper access control allows authenticated local attackers to issue IOCTL commands that can read and write physical memory, leading to kern...

CVE-2026-9492

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

PT-2026-57623

Name of the Vulnerable Software and Affected Versions Gigabyte Control Center affected versions not specified Description The MBStorage DRAM lighting control module within Gigabyte Control Center GCC contains an improper access control issue. Authenticated local attackers can send specific IOCTL...

CVE-2026-48933

A flaw was found in the Node.js WebCrypto implementation. A remote attacker could exploit this vulnerability by providing an input to the subtle.encrypt function that is a multiple of 2 gigabytes GiB. This could lead to a denial of service DoS by crashing the Node.js process. Mitigation Mitigatio...

Linux Distros Unpatched Vulnerability : CVE-2026-49346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit...