kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

CVE-2026-123571

Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a panic via malformed records. Attackers can send a crafted TSIG record in DNS wire format to cause unchecked subtraction underflow, crashing builds wit...

CVE-2026-123571 Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding

Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a panic via malformed records. Attackers can send a crafted TSIG record in DNS wire format to cause unchecked subtraction underflow, crashing builds wit...

CVE-2026-123571

Hickory DNS versions 0.26.0 before 0.26.2 are vulnerable to an integer underflow vulnerability during TSIG RDATA decoding . A remote attacker can trigger a panic by sending a crafted TSIG record in DNS wire format, which causes an unchecked subtraction underflow. This flaw specifically crashes bu...

CVE-2026-123571 Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding

Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a panic via malformed records. Attackers can send a crafted TSIG record in DNS wire format to cause unchecked subtraction underflow, crashing builds wit...

EUVD-2026-119456

Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a panic via malformed records. Attackers can send a crafted TSIG record in DNS wire format to cause unchecked subtraction underflow, crashing builds wit...

CVE-2026-123571: hickory-dns: Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows…

Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a panic via malformed records. Attackers can send a crafted TSIG record in DNS wire format to cause unchecked subtraction underflow, crashing builds wit...

PT-2026-139852

Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a panic via malformed records. Attackers can send a crafted TSIG record in DNS wire format to cause unchecked subtraction underflow, crashing builds wit...

Windows-CVE-2024-38063

Windows-TCP/IP-IPv6CVE-2024-38063 Vulnerability CVE-2024-38063 is a remote code execution vulnerability in the TCP/IP component of the Windows operating system. According to Microsoft's official description, the vulnerability has a maximum severity rating of Critical, with a CVSS score of 9.8, an...

CVE-2020-1349

CVE-2020-1349 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Korean Windows 10 1909 x64, codepage 949. TLDR; I have not been able to bypass aslr using this vulnerability, but I have written an outlook 2019 32bit exploit that pops up a calculator using the address of a...

CVE-2026-121727

Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass httpbodymax by sending more body bytes than declared. Attackers can send oversized first segments over many concurrent POST, PUT or DELETE connections,...

CVE-2026-93792

A flaw was found in the Linux kernel's iwlwifi wireless driver. When handling Wake-on-Wireless-LAN WoWLAN functionality, the driver fails to properly validate packet length values provided by the device firmware. An attacker with local access could exploit this integer underflow vulnerability to...

CVE-2026-80303

An integer underflow vulnerability in the Avast Windows Filtering Platform WFP stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does n...

CVE-2026-80303 Avast WFP stream parser integer underflow causes system crash

An integer underflow vulnerability in the Avast Windows Filtering Platform WFP stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does n...

EUVD-2026-118328

An integer underflow vulnerability in the Avast Windows Filtering Platform WFP stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does n...

CVE-2026-80303

The Avast Windows Filtering Platform (WFP) stream parser on Windows is vulnerable to an integer underflow (CWE-191). The WFP callout driver fails to properly validate input stream sizes against expected boundaries during packet fragment reassembly. Processing specially crafted input causes the le...

CVE-2026-80303: Gen Digital: An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial…

An integer underflow vulnerability in the Avast Windows Filtering Platform WFP stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does n...

CVE-2026-116788

FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in switchxmldecode can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An...

CVE-2026-121727

A flaw was found in Kore. An unauthenticated remote attacker can trigger an integer underflow in the HTTP request body handling mechanism by sending more body data than declared in the request header. This flaw allows the attacker to bypass configured maximum body size restrictions, resulting in...