17103 matches found
SUSE-SU-2026:4395-1 Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow bsc1280911...
Important: Red Hat Security Advisory: gstreamer1-plugins-good security update
An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
CVE-2026-95520
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
SUSE-SU-2026:4387-1 Security update for corosync
This update for corosync fixes the following issue: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738...
CVE-2026-96423
A flaw was found in Wireshark. A heap-based buffer overflow in the X11 protocol dissector allows an attacker to cause a Denial of Service DoS by injecting malformed packets or providing a crafted capture file. Successful exploitation leads to an application crash, disrupting network packet...
CVE-2026-95520
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
EUVD-2026-88733
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
CVE-2026-95520 Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
CVE-2026-95520 Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
CVE-2026-95520
A heap-based buffer overflow vulnerability exists in rpm when parsing untrusted RPM packages. The flaw is triggered when processing a symlink entry where the RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF. This causes an integer overflow in the iterReadArchiveNext() function, shrinking a buffer...
CVE-2026-95393
A flaw was found in Wireshark's CSN.1 Concrete Syntax Notation One protocol dissector. By transmitting malformed network packets or providing a crafted packet capture file, an attacker can trigger a heap-based buffer overflow. This vulnerability causes the application to crash, leading to a Denia...
CVE-2026-95388
A flaw was found in Wireshark. A heap-based buffer overflow in the sharkd utility can cause the application to crash, resulting in a Denial of Service DoS. An attacker could exploit this vulnerability by convincing a user to process specially crafted input. Mitigation To mitigate this flaw,...
CVE-2026-95387
A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...
CVE-2026-95389 Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95389 Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95389
A heap-based buffer overflow vulnerability exists in the SCTP protocol dissector of Wireshark . This flaw affects versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 , potentially allowing an attacker to cause a denial of service (DoS) . For impacted systems, it is recommended to update to the latest ver...
CVE-2026-95389 Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95387 Heap-based Buffer Overflow in Wireshark
SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95387
A heap-based buffer overflow exists in the SPDY protocol dissector of Wireshark , affecting versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 . Exploitation of this vulnerability can result in a denial of service (DoS) . Users are advised to update to the latest version, specifically 4.6.9 or 4.4.19 , ...