Lucene search
+L

7575 matches found

SUSE CVE
SUSE CVE
•added 2026/03/18 12:24 a.m.•19 views

SUSE CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

5.3CVSS7.2AI score0.0017EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/03/17 6:11 p.m.•41 views

CVE-2026-25772 Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

4.9CVSS0.00513EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/03/17 6:11 p.m.•10 views

CVE-2026-25772 Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

4.9CVSS6.1AI score0.00513EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/03/17 6:11 p.m.•18 views

CVE-2026-25772 Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

4.9CVSS6.3AI score
SaveExploits0References3
CVE
CVE
•added 2026/03/17 6:11 p.m.•39 views

CVE-2026-25772

Wazuh Database synchronization module (wdb_delta_event.c) contains a stack-based buffer overflow due to an integer underflow in the query buffer size calculation. Affected range: 4.4.0 up to, and including, 4.14.2 (fixed in 4.14.3). If a payload causes the 2048-byte query buffer to overflow, the ...

7.2CVSS6.1AI score0.00513EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2026/03/17 12:00 a.m.•22 views

Wazuh 数字错误漏洞

Wazuh is an open-source application developed by Wazuh. It is used for collecting, summarizing, indexing, and analyzing security data, helping organizations detect intrusions, threats, and abnormal behaviors. Versions of Wazuh from 4.4.0 to 4.14.3 contained a numerical error vulnerability. This...

7.2CVSS6.3AI score0.00513EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/17 12:00 a.m.•7 views

CVE-2026-25772: Stack-based Buffer Overflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

7.2CVSS6.1AI score0.00513EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/16 3:30 p.m.•15 views

EUVD-2026-12127

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/16 2:29 p.m.•24 views

CVE-2026-3084

A flaw was found in GStreamer. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. The issue stems from an integer underflow during the parsing of H.266 video codec picture partitions, caused by insufficient validation of user-supplied data...

7.8CVSS8.2AI score0.00329EPSS
SaveExploits0References5
NVD
NVD
•added 2026/03/16 2:19 p.m.•12 views

CVE-2026-3084

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS0.00329EPSS
SaveExploits0References5
NVD
NVD
•added 2026/03/16 2:19 p.m.•16 views

CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS0.0017EPSS
SaveExploits1References2
osv_azl
osv_azl
•added 2026/03/16 2:19 p.m.•20 views

AZL-79862 CVE-2026-32775 affecting package libexif for versions less than 0.6.24-2

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS7.2AI score0.0017EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2026/03/16 2:19 p.m.•19 views

UBUNTU-CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS7.2AI score0.0017EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2026/03/16 2:19 p.m.•23 views

UBUNTU-CVE-2026-3084

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/03/16 1:59 p.m.•16 views

CVE-2026-32775

A flaw was found in libexif. When decoding MakerNotes, an integer underflow can occur in the exifmnotedatagetvalue function if a zero size is passed. This can lead to a buffer overwrite, potentially allowing an attacker to achieve arbitrary code execution, disclose sensitive information, or cause...

7.8CVSS7.5AI score0.0017EPSS
SaveExploits1References5
Snyk
Snyk
•added 2026/03/16 8:45 a.m.•22 views

Integer Underflow (Wrap or Wraparound)

Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound in the exifmnotedatagetvalue function when a size of 0 is passed as an argument during decoding MakerNotes. An attacker can cause the in-buffer to be overwritten and potentially execute arbitrary cod...

8.6CVSS7.6AI score0.0017EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/16 6:31 a.m.•8 views

CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.4CVSS7.2AI score0.0017EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/16 6:31 a.m.•82 views

CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.4CVSS0.0017EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•4 views

CVE-2026-3084: Integer Underflow (Wrap or Wraparound)

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•9 views

CVE-2026-32775: Integer Underflow (Wrap or Wraparound)

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS7.2AI score0.0017EPSS
SaveExploits1References1
Rows per page
Query Builder