33 matches found
CVE-2026-10858
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages...
EUVD-2026-83034
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages...
CVE-2026-10858
CVE-2026-10858 is a heap buffer underflow in the IBM MQ queue manager's protocol handling, triggered when processing multi-segment messages . An authenticated remote attacker can cause a denial of service or potentially execute arbitrary code . IBM rates it CVSS 3.1: 9.9 (Critical) with changed s...
CVE-2026-10858 IBM MQ for HPE NonStop is vulnerable to a denial of service attack
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages...
CVE-2026-10858 IBM MQ for HPE NonStop is vulnerable to a denial of service attack
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages...
CVE-2026-10858: Heap-based Buffer Overflow
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages...
Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-10858)
Summary IBM MQ has addressed a heap buffer underflow vulnerability in the queue manager's protocol handling that could allow a remote authenticated attacker to execute arbitrary code Vulnerability Details CVEID:CVE-2026-10858 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a...
Security Bulletin: IBM MQ Appliance is affected by a heap buffer underflow vulnerability (CVE-2026-10858)
Summary IBM MQ Appliance has addressed a heap buffer underflow vulnerability that could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code when processing multi-segment messages. Vulnerability Details CVEID:CVE-2026-10858 DESCRIPTION: IBM MQ could...
EulerOS Virtualization 2.13.1 : openldap (EulerOS-SA-2026-3186)
According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffe...
EulerOS Virtualization 2.13.0 : openldap (EulerOS-SA-2026-3226)
According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffe...
ANT-2026-H94NCB56 · Leptonica · Heap Buffer Underflow
heap-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-H94NCB56: Heap buffer underflow in...
ANT-2026-3JR8RVFB · Leptonica · Heap Buffer Underflow
heap-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-3JR8RVFB: Heap buffer underwrite via negativ...
EUVD-2026-54283
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...
CVE-2026-43628: Integer Underflow (Wrap or Wraparound)
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...
K000160853: Multiple Vim vulnerabilities
Security Advisory Description CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL e.g., using the scp:// protocol handler, an...
📄 BuptLab DNS Relay Server 1.0 Buffer Underflow
This is a proof of concept exploit that leverages a remote heap buffer underflow denial of service vulnerability in BuptLab DNS Relay Server version 1.0.0 that was recently discovered by Antonius...
CVE-2026-26203: Use After Free
PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked...
CVE-2026-22185: Out-of-bounds Read
OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline function of mdbload. When processing malformed input containing an embedded NUL byte, an unsigned offset calculation can underflow and cause...