CVE-2026-56153

A flaw was found in httpd's modcharsetlite module. A heap-based buffer overflow an out-of-bounds memory write occurs in the finishpartialchar function when handling character set conversions. A remote attacker can exploit this flaw by sending specially crafted requests, leading to memory...

Linux Distros Unpatched Vulnerability : CVE-2026-103680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames...

RockyLinux 9 : gvfs (RLSA-2026:74370)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:74370 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 gvfs: gvfs-admin socket ownership race permits local root CVE-2026-88924 Tenable has...

CVE-2026-103242

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen...

Multiple Vulnerabilities in Dnsmasq (CVE-2026-4890, CVE-2026-4891, CVE-2026-42959, CVE-2026-4892, CVE-2026-4893)

Brocade is issuing a security advisory addressing multiple vulnerabilities identified in dnsmasq component used across affected products. These vulnerabilities range from memory corruption and heap-based out-of-bounds reads/writes to uncontrolled resource consumption leading to Denial of Service...

CVE-2026-27831-POC

CVE-2026-27831-POC CVE-2026-27831 の PoC エクスプロイト これは、rldns バージョン 1.3 におけるリモートのヒープベースの領域外読み取り（サービス拒否を引き起こす）に対する概念実証エクスプロイトです。 rldns は、x8664 アーキテクチャ上で動作する、linux、freebsd、netbsd 向けのオープンソース DNS サーバーです。 Rldns バージョン 1.3 には、サービス拒否につながるヒープベースの領域外読み取りがあります。バージョン 1.4 には、この問題に対するパッチが含まれています。 脆弱性発見者: Antonius...

CVE-2026-102505

A flaw was found in perl-Imager. When processing floating-point samples from a paletted image, the application allocates an undersized buffer for multi-channel requests. An attacker could provide a specially crafted image to trigger a heap-based buffer overflow with controlled data, potentially...

CVE-2019-19204

CVE-2019-19204 Oniguruma 6.x 6.9.4rc2 より前 に問題が発見されました。regparse.c の fetchintervalquantifier 旧称 fetchrangequantifier 関数において、PEND をチェックせずに PFETCH が呼び出されています。これにより、ヒープベースのバッファオーバーリードが発生します。 研究者: ManhND of The Tarantula Team, VinCSS a member of Vingroup Oniguruma とは K. Kosako による Oniguruma は、BSD...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP の特権昇格 📌 このリポジトリには、Windows Credential Security Support Provider CredSSP プロトコルに影響するヒープ領域でのバッファオーバーフロー Heap-based Buffer Overflow の脆弱性 CVE-2025-47987 に関するドキュメントと分析リソースが含まれています。 📝 説明 この脆弱性により、ローカルで認証された 攻撃者がシステム上で特権を昇格できる可能性があります。この欠陥は、CredSSP...

DEBIAN-CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

RLSA-2026:73998 Important: gvfs security update

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secure Shell File Transfer Protocol SFTP, Web Distributed Authoring and Versioning WebDAV, Common Internet File System CIFS, Server Message Block SMB, and...

gvfs security update

An update is available for gvfs. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GVFS is the GNOME Desktop Virtual File System layer that allows users to easily...

EUVD-2026-90773

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

Important: Red Hat Security Advisory: gvfs security update

An update for gvfs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

gvfs security update

An update is available for gvfs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GVFS is the GNOME Desktop Virtual File System layer that allows users to easily...

RLSA-2026:73997 Important: gvfs security update

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secure Shell File Transfer Protocol SFTP, Web Distributed Authoring and Versioning WebDAV, Common Internet File System CIFS, Server Message Block SMB, and...