170 matches found
CVE-2026-62423: Improper Handling of Length Parameter Inconsistency
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...
CVE-2026-54466: Improper Handling of Length Parameter Inconsistency
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite...
CVE-2026-8047
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device...
EUVD-2026-31800
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device...
The vulnerability of the rtpqdm2depay component in the GStreamer multimedia framework allows a attacker to execute arbitrary code.
The vulnerability of the rtpqdm2depay component in the GStreamer multimedia framework is related to incorrect checking of the length of input data during the processing of the X-QDM RTP payload. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
AZL-80624 CVE-2026-23307 affecting package kernel for versions less than 6.6.130.1-1
In the Linux kernel, the following vulnerability has been resolved: can: emsusb: emsusbreadbulkcallback: check the proper length of a message When looking at the data in a USB urb, the actuallength is the size of the buffer passed to the driver, not the transferbufferlength which is set by the...
CVE-2026-0793
ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability...
CVE-2025-15059: Heap-based Buffer Overflow
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...
EUVD-2019-5278
Malware in sbrugna...
EUVD-2021-21750
Malware in sbrugna...
EUVD-2021-21767
Malware in sbrugna...
EUVD-2021-21773
Malware in sbrugna...
EUVD-2020-3548
Malware in sbrugna...
EUVD-2020-24905
Malware in sbrugna...
EUVD-2020-3633
Malware in sbrugna...
EUVD-2020-3569
Malware in sbrugna...
EUVD-2020-3576
Malware in sbrugna...
EUVD-2019-5277
Malware in sbrugna...