31738 matches found
CentOS Linux 6 [TuxCare] Security Update: glibc / glibc-common / glibc-devel / glibc-headers / glibc-static / etc (CENTOS6:CLSA-2025:1757700075)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1757700075 advisory. - In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap- based buffer over-read via an attempted...
CentOS Linux 6 [TuxCare] Security Update: cups / cups-devel / cups-libs / cups-lpd / cups-php (CENTOS6:CLSA-2025:1758796854)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1758796854 advisory. - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-base...
CentOS Linux 6 [TuxCare] Security Update: file / file-devel / file-libs / file-static / python-magic (CENTOS6:CLSA-2026:1777683788)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777683788 advisory. - cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow...
Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-ugly-free Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1777460813)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777460813 advisory. - GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
ALSA-2026:73997 Important: gvfs security update
GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secure Shell File Transfer Protocol SFTP, Web Distributed Authoring and Versioning WebDAV, Common Internet File System CIFS, Server Message Block SMB, and...
SUSE CVE-2026-102566
CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft malicious model files with oversized payload lengths to write past heap allocation boundaries, causing crashes or...
CVE-2026-92368
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...
EUVD-2026-89021
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...
CVE-2026-92368 Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...
CVE-2026-92368
Prior versions of TeamViewer Full Client and Host for Linux and macOS (before 15.82) are vulnerable to a heap-based buffer overflow during the processing of .tvs session recording files . The flaw is caused by a size mismatch during the decompression of recorded session data, which can lead to ou...
CVE-2026-92368 Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...
CVE-2026-102566
CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft malicious model files with oversized payload lengths to write past heap allocation boundaries, causing crashes or...
CVE-2026-95389
A flaw was found in the SCTP protocol dissector in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing a heap-based buffer overflow, resulting in a denial of service or potentially allowing code execution. Mitigation If the SCTP protocol...
EUVD-2026-88967
CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft malicious model files with oversized payload lengths to write past heap allocation boundaries, causing crashes or...
gstreamer-plugins-good: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow
A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...
Important: Red Hat Security Advisory: gstreamer1-plugins-good security update
An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...
gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing
A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...
CVE-2026-97427
A flaw was found in the Linux kernel's AMD GPU power management driver. A local user with write access to the powerplay sysfs interface could trigger a heap-based buffer overflow by providing input data exceeding the allocated buffer size. This issue can lead to memory corruption, resulting in a...
Security update for libXrender
This update for libXrender fixes the following issue: CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow bsc1280911. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can r...
