19219 matches found
PT-2026-79174
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...
UBUNTU-CVE-2026-75144
FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerabi...
UBUNTU-CVE-2026-75141
FFmpeg before commit acf5d7c contains a heap buffer overflow in the hv...
PT-2026-79193
Name of the Vulnerable Software and Affected Versions Capstone versions prior to 6.0.0-Alpha10 Description SH floating-point decoders, including opFADD, opFMUL, and opFSUB, call set reg and set reg n using sh info.op.op count without verifying the fixed-size operands array. When processing repeat...
PT-2026-79153
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local attacker to gain elevated privileges. A heap-based buffer overflow occurs when a program writes more data to a heap...
PT-2026-78914
Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description An unprivileged local user can exploit an integer overflow in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, resulting in an undersized memory buffe...
PT-2026-79160
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a local attacker to gain elevated privileges. A heap buffer overflow occurs when a program writes more data to a heap-allocated memo...
Linux Distros Unpatched Vulnerability : CVE-2026-75143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader libavformat/librist.c. libristread ignored its size argument and copied...
PT-2026-79161
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local authenticated attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap...
Linux Distros Unpatched Vulnerability : CVE-2026-18917
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows...
CVE-2026-75143
FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RI...
CVE-2026-75144
FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerabi...
UBUNTU-CVE-2026-75143
FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RI...
CVE-2026-76918
CVE-2026-76918 is a heap-based buffer overflow in the SSH protocol dissector of Wireshark , affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18 . A local attacker who can convince a user to open a crafted packet capture file or capture traffic from a malicious network can trigger a crash of the Wires...
CVE-2026-76917 Heap-based Buffer Overflow in Wireshark
Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76889 Heap-based Buffer Overflow in Wireshark
UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76888 Heap-based Buffer Overflow in Wireshark
RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76888
Wireshark 's RDP protocol dissector can crash when processing crafted traffic, leading to denial of service . The vulnerability affects versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18 . The CNA (GitLab) assigns a CVSS 3.1 score of 3.1 (Low) with high attack complexity and required user inte...
CVE-2026-76883
The Catapult DCT2000 file parser in Wireshark 4.6.0–4.6.7 and 4.4.0–4.4.18 crashes on malformed input, causing denial of service. CVSS 4.7 (local, high complexity). No in-the-wild exploitation reported; upgrade to patched versions. See wireshark.org/security/wnpa-sec-2026-74.html and gitlab.com/w...
