EUVD-2026-66555

The LoRaWAN application-layer clock-synchronization service parses downlinks in clocksyncpackagecallback subsys/lorawan/services/clocksync.c. Its command loop only guarantees that the one-byte command id is in bounds; for the CLOCKSYNCCMDAPPTIME AppTimeAns command the handler then reads a 4-byte...

CVE-2026-74710

In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an insufficient length check in the hfsasc2mac function, which could lead to out-of-bounds writes...

libX11 Insufficient Length Check / Injection

Hello list, A missing length check in libX11 causes data from LookupColor requests mess up the client-server communication protocol and inject malicious X server requests. The flaw is comparable to SQLi injecting commands into database connections granting an attacker access to all features of th...

Pure-FTPd <= 1.0.49 Multiple Vulnerabilities

Pure-FTPd is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Null pointer dereference

The comparedn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows 1 remote attackers to cause a denial of service out-of-bounds read, NULL pointer dereference, and daemon crash or 2 remote authenticated users to impersonate arbitrary users and bypass access restrictions vi...

CVE-2013-6075

The comparedn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows 1 remote attackers to cause a denial of service out-of-bounds read, NULL pointer dereference, and daemon crash or 2 remote authenticated users to impersonate arbitrary users and bypass access restrictions vi...

NetBSD Security Advisory 2002-016: Insufficient length check in ESP authentication data

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-016 ================================= Topic: Insufficient length check in ESP authentication data Version: NetBSD-current: source prior to August 23, 2002 NetBSD-1.6 beta: source prior to August 23, 2002 NetBSD-1.5.3: affected...