RHEL 10 : libvpx (RHSA-2026:5227)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:5227 advisory. The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia...

RHEL 9 : libvpx (RHSA-2026:5319)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:5319 advisory. The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in ___interceptor_strncpy

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4834546616172544 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in frame_to_schunk

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4600686351548416 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in decoder_context::decode_slice_unit_WPP

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6267766733864960 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

CVE-2026-4455

A heap buffer overflow flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=488585504...

CVE-2026-4448

A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=486972661...

EUVD-2026-13453

Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

freetype2:glyphs-outlines: Heap-buffer-overflow in sdf_generate_subdivision

Detailed Report: https://oss-fuzz.com/testcase?key=6506681604571136 Project: freetype2 Fuzzing Engine: afl Fuzz Target: glyphs-outlines Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7d0090c02728 Crash State: sdfgeneratesubdivision...

CVE-2026-4463

Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-4463

Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

EUVD-2026-13451

Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-4442: Heap-based Buffer Overflow

Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-4443: Heap-based Buffer Overflow

Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

AlmaLinux 10 : libvpx (ALSA-2026:4629)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:4629 advisory. libvpx: Heap buffer overflow in libvpx CVE-2026-2447 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note tha...

AZL-80196 CVE-2006-10003 affecting package perl-XML-Parser for versions less than 2.47-2

XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in stserialstack. In the case stackptr == stacksize - 1, the stack will NOT be expanded. Then the new value will be written at location ++stackptr, which equals stacksize and therefore falls just outside the allocat...

hostap:pasn-init: Heap-buffer-overflow in wpa_pasn_auth_rx

Project: git://w1.fi/srv/git/hostap.git Detailed Report: https://oss-fuzz.com/testcase?key=6425366330933248 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: pasn-init Job Type: libfuzzerasani386hostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0xf4c006ac Crash...

CVE-2006-10003: Off-by-one Error

XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in stserialstack. In the case stackptr == stacksize - 1, the stack will NOT be expanded. Then the new value will be written at location ++stackptr, which equals stacksize and therefore falls just outside the allocat...

CVE-2026-2646: Heap-based Buffer Overflow

A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...

wolfSSL 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, aimed at developers working with embedded systems. Versions of wolfSSL prior to 5.8.4 contained a security vulnerability. This vulnerability stemmed from an integer underflow in the AEA...