33924 matches found
CVE-2026-111379
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persistcachegetdata,...
CVE-2021-3156
Project Title Exploit generator for CVE-2021-3156 sudo Installation 1. Install dependencies ./install.sh 2. Run exploit generator: ./run.sh 3. If the system's sudo version is vulnerable, an exploit is generated for the installed version 4. The exploit is generated in exploit.c and the binary...
CVE-2026-111381
FreeRDP versions before 3.32.0 are vulnerable to a heap buffer overflow in the persistent_cache_read_entry_v2 function. The root cause is an integer wraparound during bitmap size calculation, which occurs when an attacker provides a persistent cache v2 file with oversized width and height values....
CVE-2026-111381 FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that causes...
EUVD-2026-102562
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that causes...
CVE-2026-111379
FreeRDP versions before 3.32.0 are vulnerable to a heap buffer overflow within the persistent_cache_read_entry_v3 function. A local attacker can corrupt memory by providing a crafted v3 persistent cache file containing large width and height values. These values cause an integer wrap in the size ...
CVE-2026-111379 FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persistcachegetdata,...
EUVD-2026-102560
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistentcachereadentryv3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persistcachegetdata,...
EUVD-2025-211111
A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-116125
A heap buffer overflow in the stbl AddSize function isomedia/stbl write.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2026-46471
A heap-based buffer overflow vulnerability exists in GStreamer gst-plugins-good versions before 1.28.2 . The issue is located within the isomp4 plugin's qtdemux_parse_uuid function, which may read past the end of a heap-allocated buffer while parsing an MP4 file . This flaw could allow an attacke...
rtw89_update_6ghz_rnr_chan_ax Heap Buffer Overflow DoS
The vulnerability of the rtw89update6ghzrnrchanax function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2026-46471
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...
Linux kernel srpt_get_desc_tbl Heap Buffer Overflow
The vulnerability of the srptgetdesctbl function in the drivers/infiniband/ulp/srpt/ibsrpt.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...
Linux netlink Heap Buffer Overflow DoS
The vulnerability of the net/tipc/netlink.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux tegra_ahub_put_value_enum Heap Buffer Overflow DoS
The vulnerability of the tegraahubputvalueenum function in the sound/soc/tegra/tegra210ahub.c component of the Linux operating system is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the tipcupdatenametbl function in the net/tipc/namedistr.c component of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the pfcplinksetup function in the drivers/net/pfcp.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux net/tipc/socket.c Heap Buffer Overflow DoS
The vulnerability of the tipcskconnprotorcv function in the net/tipc/socket.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the xilinxspifindbuffersize function in the drivers/spi/spi-xilinx.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a system failure...