20 matches found
CVE-2026-80790
CVE-2026-80790 affects the Linux kernel NVMe target over Fibre Channel module (nvmet-fc ). The root cause is in nvmet_fc_alloc_ls_iodlist(): when an rqstbuf allocation or response buffer DMA mapping fails, the error-unwind loop decrements the iod pointer past the start of the array, causing kfree...
CVE-2026-80790
In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: fix invalid free in LS IOD error path nvmetfcalloclsiodlist advances iod while initializing the LS IOD array. If an rqstbuf allocation or response buffer DMA mapping fails, the unwind loop decrements iod past the start ...
EUVD-2026-71433
In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: fix invalid free in LS IOD error path nvmetfcalloclsiodlist advances iod while initializing the LS IOD array. If an rqstbuf allocation or response buffer DMA mapping fails, the unwind loop decrements iod past the start ...
EUVD-2026-71430
In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: fix use-after-free in nvmetpciepfexeciodwork nvmetpciepfexeciodwork submits an I/O command with req-execute and then waits for the command to complete and transfers the data back to the host. This wait is not need...
CVE-2026-80787
CVE-2026-80787 is a use-after-free in the Linux kernel's nvmet_pci_epf module (NVMe Target over PCI Endpoint Function). After submitting an I/O command via req->execute(), the function nvmet_pci_epf_exec_iod_work() reads iod->data_len and iod->dma_dir to decide whether to wait for comple...
ANT-2026-TNDDD6NW · ffmpeg · Stack Buffer Overflow
stack-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-TNDDD6NW: Stack buffer overflow in mpegts.c pmtcb via multiple IOD The MPEG-TS PMT parser in libavformat/mpegts.c allocates a fixed...
CVE-2022-38530
GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOMIOD...
Linux Distros Unpatched Vulnerability : CVE-2022-38530
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOMIOD. CVE-2022-38530 Note that Nessus relies on the presenc...
Malicious code in @zalastax/nolb-_iod (npm)
The package @zalastax/nolb-iod was found to contain malicious code...
MAL-2025-10135 Malicious code in @zalastax/nolb-_iod (npm)
The package @zalastax/nolb-iod was found to contain malicious code...
The vulnerability of the ISOM_IOD component in the GPAC multimedia platform allows a hacker to trigger a service failure.
The vulnerability of the ISOMIOD component in the GPAC multimedia platform is related to writing beyond the boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2022-38530
GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOMIOD...
DEBIAN-CVE-2022-38530
GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOMIOD...
UBUNTU-CVE-2022-38530
GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOMIOD...
GPAC 缓冲区错误漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.1-DEV-rev232-gfcaa01ebb-master, which stems from a stack overflow that was found to be included when processing ISOMIOD...
PT-2022-7433 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev232-gfcaa01ebb-master Description: The issue is related to a stack overflow when processing ISOM IOD, which can be exploited to cause a denial of service. It is also described as a buffer overflow vulnerability in the...
PT-2022-26811 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A memory leak was discovered in GPAC via the component gf odf new iod at odf/odf code.c. This issue affects the specified version of GPAC. Recommendations: For GPAC version...
Wireshark 'profinet/packet-dcerpc-pn-io.c' Denial of Service Vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the 'dissectIODWriteReq' function in the...
UBUNTU-CVE-2017-9766
In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...
DEBIAN-CVE-2017-9766
In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...