CVE-2026-48433 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48431

Substance3D - Designer (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) with a local attac...

USN-8678-1: OpenSSL vulnerabilities

It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. CVE-2026-14456 It was discovered that...

USN-8678-1 openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. CVE-2026-14456 It was discovered that...

CVE-2026-59187

OpenEXR, the reference implementation for the EXR image format widely used in the motion picture industry, is affected by a heap out-of-bounds write in the exrmetrics tool when processing a crafted deep scanline EXR file. The root cause is a type mismatch: when pixel conversion options such as --...

CVE-2026-59187 OpenEXR: exrmetrics deep pixelmode heap buffer overflow

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 are vulnerable to a heap out-of-bounds write when exrmetrics reads a crafted deep scanline EXR. This occur...

CVE-2026-59187 OpenEXR: exrmetrics deep pixelmode heap buffer overflow

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 are vulnerable to a heap out-of-bounds write when exrmetrics reads a crafted deep scanline EXR. This occur...

EUVD-2026-65584

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...

nginx-cve-2026-42945-poc

CVE-2026-42945 — تجاوز سعة المخزن المؤقت في الكومة بوحدة NGINX Rewrite Module → RCE تم تأكيد نجاح RCE — من خلال تجاوز سعة الكومة + حقن العمليات عبر GDB، يتم تنفيذ أوامر عشوائية في عمليات NGINX / OpenResty worker. البدء السريع root@kitploit: 一键构建 NGINX 镜像 + 执行 RCE 测试 ./run.sh nginx 一键构建 OpenResty ...

CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow

अस्वीकरण यह लेख केवल तकनीकी चर्चा और सीखने के उद्देश्य से है। इस दस्तावेज़ में दी गई जानकारी के उपयोग से होने वाले किसी भी प्रत्यक्ष या अप्रत्यक्ष परिणाम और नुकसान की जिम्मेदारी उपयोगकर्ता की होगी, लेखक इसके लिए कोई जिम्मेदारी नहीं लेता है। CVE-2023-38545: libcurl-SOCKS5-heap-buffer-overflow संदर...

CVE-2026-64565

A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...

CVE-2026-14676

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

CVE-2026-52492

A flaw was found in libtiff. An integer overflow vulnerability exists in the cvtRaster function of the rgb2ycbcr utility. When processing a specially crafted TIFF image during YCbCr conversion, an attacker could trigger an undersized heap allocation, leading to a heap-based buffer overflow. This...

CVE-2022-0185-Case-Study

CVE-2022-0185 案例研究 本案例研究是ECE 9069课程“黑客入门”的一个作业成果：https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 概述 CVE-2022-0185 是一个基于堆的缓冲区溢出漏洞，存在于 Linux 内核文件系统上下文（Filesystem Context）功能中的 legacyparseparam 函数验证所提供的参数长度的方式中。一个非特权本地用户（如果启用了非特权用户命名空间，则不需要；否则需要命名空间的 CAPSYSADMIN 权限），能够打开一个不支持文件系统上下文...

CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

CVE-2026-42945

Script de Avaliação de Risco Real do CVE-2026-42945 Ferramenta de avaliação de risco local para CVE-2026-42945 Nginx Rift. Diferente de simplesmente dizer "versão afetada é perigosa", este script verifica camada por camada as três condições que realmente determinam o risco, fornecendo uma conclus...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin - Corruzione della memoria tramite SQL Injection Un overflow del buffer basato su heap può verificarsi quando si chiama la stored procedure estesa non documentata "spreplwritetovarbin". Questa vulnerabilità riguarda tutte le versioni di...

RLSA-2026:59152 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...