20964 matches found
libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation
A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...
freerdp:TestFuzzClientRdpFile: Heap-buffer-overflow in CommandLineParseCommaSeparatedValuesEx
Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6177768388493312 Project: freerdp Fuzzing Engine: honggfuzz Fuzz Target: TestFuzzClientRdpFile Job Type: honggfuzzasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...
Linux Distros Unpatched Vulnerability : CVE-2026-57164
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP...
OESA-2026-3635 libvirt security update
Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...
OESA-2026-3634 libvirt security update
Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...
OESA-2026-3633 libvirt security update
Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...
OESA-2026-3632 libvirt security update
Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...
zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
...
CVE-2026-86142
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...
AZL-99720 CVE-2026-86142 affecting package libxml2 2.11.5-10
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...
AZL-99711 CVE-2026-86138 affecting package libxml2 2.11.5-10
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
CVE-2026-86138
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
CVE-2026-86142
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...
EUVD-2026-71835
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...
CVE-2026-86142
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...
CVE-2026-86142
libxml2 versions prior to 2.15.4 are affected by a heap-based buffer overflow in the xmlXPtrEvalXPtrPart function, caused by an xpointer length saturation in xmlXPtrEval. This allows a local attacker (no privileges required, high complexity) to achieve high impact on confidentiality and integrity...
EUVD-2026-71831
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
CVE-2026-86138
libxml2 before 2.15.4 is affected by an integer overflow in xmlDictAddQString (dict.c), which leads to a heap-based buffer overflow . The vulnerability requires a local attack with high complexity , no privileges, and no user interaction, yet can result in high confidentiality and integrity impac...