741 matches found
vulnerabilidad-LibWebP-CVE-2023-41064
vulnerability-LibWebP-CVE-2023-41064 code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP an image format file with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...
UBUNTU-CVE-2026-111162
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser WMParseNewHmp that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk length of 0-12 that wraps to roughly 4 GB, crashing application...
CVE-2026-111162
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser WMParseNewHmp that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk length of 0-12 that wraps to roughly 4 GB, crashing application...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: xfrm: Validates the prefix length of new SA entries using the SA family, when sel.family is unset. This extends the validation introduced in commit 07bf7908950a “xfrm: Validates address prefix lengths in the xfrm selector”. The...
PT-2026-115168
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser WM ParseNewHmp that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk length of 0-12 that wraps to roughly 4 GB, crashing applicatio...
DEBIAN-CVE-2026-109950
FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attackers controlling the gateway can set MsgBytes far larger than the NDR string ActualCount in consent or service messages...
JDBC pgjdbc PreparedStatement Object Unauthenticated Access
The vulnerability of the PreparedStatement.setObject method in the JDBC driver for pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to insufficient protection of operational data when processing parameter lengths. Exploiting this vulnerability can allow an attacke...
Linux Distros Unpatched Vulnerability : CVE-2026-98242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than 4G and peer2peer DMA goes through host bridge, we trigger a code path that...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fixed an issue with OoB access in the IP checksum code for negative lengths. Although the commit c2c24edb1d9c “arm64: csum: Fix pathological zero-length calls” added an early return for zero-length inputs, syzkaller...
Astra Linux – Vulnerability in libfcgi
FastCGI’s fgi2 also known as fgi versions from 2.2 through 2.4.4 have a integer overflow vulnerability, which can lead to a heap-based buffer overflow when crafted nameLen or valueLen values are passed to the IPC socket. This issue occurs in the ReadParams function in the fcgiapp.c file...
Astra Linux – Vulnerability in Linux 5.10, Linux
A vulnerability was discovered in the Linux kernel before version 5.16.12. In the file drivers/net/usb/sr9700.c, attackers can obtain sensitive information from heap memory by using crafted frame lengths from a device...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ipv4: The need to account for “fraggap” on the paged allocation path. In ipAppendData, when the paged-allocation branch is taken, alloclen and pagedlen are calculated as follows: alloclen = fragheaderlen + transhdrlen; pagedlen =...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are correctly configured, and the MIDIStreaming endpoint descriptors contain the correct information, the values of bNumEmbMIDIJack and bLength are se...
Linux Distros Unpatched Vulnerability : CVE-2026-85532
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive CP...
EUVD-2026-89791
Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive CPU and memory consumption when processing crafted WS-Security messages. The fixes enforce a minimum key length of 16 bytes, a maximum leng...
CVE-2026-85532
Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive CPU and memory consumption when processing crafted WS-Security messages. The fixes enforce a minimum key length of 16 bytes, a maximum leng...
PT-2026-103129
Name of the Vulnerable Software and Affected Versions Apache WSS4J versions prior to 4.0.2 Apache WSS4J versions prior to 3.0.6 Apache WSS4J versions prior to 2.4.4 Description Apache WSS4J fails to properly validate bounds for derived-key lengths and offsets provided by a user. This flaw allows...
CVE-2026-93813
A flaw was found in the Linux kernel's Btrfs file system. The file system validation mechanism fails to properly verify file name lengths in file reference entries, leading to an out-of-bounds memory access when processing corrupted data. A local attacker can exploit this issue by mounting or...
CVE-2026-97538
In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...
