CVE-2026-64276

CVE-2026-64276 affects the Linux kernel synaptics-rmi4 input driver. The F30/GP I/O mapping code incorrectly allocated gpioled_key_map for at most 6 entries but later iterated up to gpioled_count (0..31) and advanced input->keycodemax to the full count, risking out-of-bounds reads in the atten...

EUVD-2026-48989

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmif3ainitialize takes the GPIO count from the device query register f3a-gpiocount = buf & RMIF3AGPIOCOUNT, range 0..127. rmif3amapgpios then allocates gpiokeymap wit...

CVE-2026-64277 Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmif3ainitialize takes the GPIO count from the device query register f3a-gpiocount = buf & RMIF3AGPIOCOUNT, range 0..127. rmif3amapgpios then allocates gpiokeymap wit...

Linux Distros Unpatched Vulnerability : CVE-2026-64276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6...

PT-2026-64497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synaptics-rmi4 driver where the rmi f30 map gpios function allocates the gpioled key map with a maximum of 6 entries. However, the rmi f30 attention function...

CVE-2021-47797

Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized payload in the activation keycode field. Attackers can generate a 6000-byte buffer of repeated characters to trigger an application crash when pasted into...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004291 advisory. In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by inputsetkeycode, aka...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004278 advisory. In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004100 advisory. In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by inputsetkeycode, aka...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004174 advisory. In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition...

CVE-2021-47797 Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)

Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized payload in the activation keycode field. Attackers can generate a 6000-byte buffer of repeated characters to trigger an application crash when pasted into...

CVE-2021-47797

Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized payload in the activation keycode field. Attackers can generate a 6000-byte buffer of repeated characters to trigger an application crash when pasted into...

CVE-2021-47797 Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)

Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized payload in the activation keycode field. Attackers can generate a 6000-byte buffer of repeated characters to trigger an application crash when pasted into...

CVE-2021-47797

CVE-2021-47797 concerns Leawo Prof. Media 11.0.0.1. A DoS vulnerability in the activation keycode handling allows an oversized payload (6000-byte, repeated characters) to crash the application when pasted into the registration interface. The CVE references PoC material in multiple sources. No pat...

PT-2026-3169

Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized payload in the activation keycode field. Attackers can generate a 6000-byte buffer of repeated characters to trigger an application crash when pasted into...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000407)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000407 advisory. In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000183)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000183 advisory. In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by inputsetkeycode, aka...

EUVD-2019-11175

Malware in sbrugna...

EUVD-2008-1886

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-20636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by inputsetkeycode, aka...