CVE-2026-34855

Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34855

CVE-2026-34855 is an out-of-bounds write vulnerability in Huawei HarmonyOS/EMUI kernel module. Connected sources (CNVD, EUVD, NVD/CVE, CVE lists) describe a kernel-level issue that can compromise confidentiality and availability (impact: C and A, as per CVSS 3.1 in the NVD entry: LOCAL access, HI...

CVE-2026-34854

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34854

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34854

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34854

CVE-2026-34854 is a UAF/memory misreference vulnerability in Huawei HarmonyOS kernel module. Public records indicate impact to confidentiality and availability if exploited locally, with CVSSv3.1 metrics showing a HIGH base score (7.1) under LOCAL/LOW complexity, with LOW privileges and no user i...

PT-2026-32249

Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34859: Use After Free

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34855: Improper Input Validation

Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

PT-2026-32248

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34854: Use After Free

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

PT-2026-32252

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

Linux kernel mailbox cmdq_get_clocks() Buffer Overflow

The vulnerability of the cmdqgetclocks function in the drivers/mailbox/mtk-cmdq-mailbox.c file of the Linux kernel’s mailbox support module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow ...

Linux RISCV Architecture Kernel Heap Buffer Overflow DoS

The vulnerability of the SAVEABISTATE function in the arch/riscv/kernel/mcount.S module of the Linux operating system’s RISCV-architecture-based module management subsystem is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the biointegrityprep function in the block/bio-integrity-auto.c module, which supports the block-level kernel in the Linux operating system, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

qsee_uefi_get_variable() Firmware Driver System Failure

The vulnerability of the qseeuefigetvariable function in the drivers/firmware/qcom/qcomqseecomuefisecapp.c driver code related to the Linux kernel-based firmware support module is due to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could...

blkcg_init_disk Heap Buffer Overflow DoS

The vulnerability of the blkcginitdisk function in the block/blk-cgroup.c module, which supports the Linux kernel’s block-level support, involves the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-22163

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...

EUVD-2026-16132

Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...

CVE-2026-4747

Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...