Important: Red Hat Security Advisory: libssh2 security update

An update for libssh2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android

CVE-2026-76036 — Harness de détection des mipmaps profondeur/stencil NPOT de Dawn WebGPU Débordement de tas critique CVSS 9.6, CWE-122 dans Dawn , l'implémentation WebGPU de Chromium, dans Google Chrome sur Android antérieur à 151.0.7922.169 stable 151, publié le 2026-08-18. Cause racine, selon l...

uboatdemo

uboatdemo Демонстрационный сервер для CVE-2016-3955 UBOAT Вызывает переполнение буфера в куче Linux, когда USB/IP клиент начинает отправлять управляющие URBs. Сборка Сервер — это стандартная простая программа на Go. Вы можете собрать его обычным способом, если у вас установлен и настроен Go в...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

libwebp-checker

中文 | EN Outils de vérification des dépendances libwebp pour CVE-2023-4863 Cet outil vérifie si l'application ou le processus de votre serveur est affecté par CVE-2023-4863, un débordement de tas de libwebp Version supérieure à 0.5.0. Exécutez ce script dans votre environnement de production avec...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

CVE-2026-18374

A flaw was found in the GNU C Library glibc. This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the fopen function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

Important: Red Hat Security Advisory: libXfont2 security update

An update for libXfont2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

CVE-2023-21716-POC

التاريخ في فبراير 2023، أصدرت مايكروسوفت تصحيحًا لثغرة أمنية خطيرة في مايكروسوفت وورد، تم تحديدها برقم CVE-2023-21716 وبدرجة CVSS تبلغ 9.8، والتي قد تسمح للمهاجمين بتنفيذ تعليمات برمجية عن بُعد دون مصادقة. كما أثرت هذه الثغرة على جزء المعاينة في Outlook، مما يعني أنه يمكن تفعيلها بمجرد معاينة...

ripple20-digi-connect-exploit

استغلال Ripple20: Digi Connect ME 9210 المؤلفان: Moshe Kol, Shlomi Oberman يحتوي هذا المستودع على استغلال PoC لـ CVE-2020-11896، وهي ثغرة أمنية خطيرة من نوع تجاوز سعة المخزن المؤقت في الكومة heap-based buffer overflow في حزمة Track TCP/IP جزء من مجموعة ثغرات Ripple20. يحقق هذا الاستغلال تنفيذًا ع...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling

A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol RDP packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the...

freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can exploit a heap buffer overflow vulnerability during Opus audio decoding. This occurs when the server negotiates Opus audio with a vulnerable client, causing the...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...