TOTOLINK N300RH Router setUpgradeFW() Code Execution

The vulnerability of the setUpgradeFW function in the cgi-bin/cstecgi.cgi script of the TOTOLINK N300RH router microprogramming system is related to the escape operation from memory buffers when processing the FileName variable. Exploiting this vulnerability allows an attacker to execute arbitrar...

Google Chrome Heap Buffer Overflow DoS

The vulnerability in the Google Chrome web browser is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created HTML page...

Keepalived parser Heap Buffer Overflow DoS

The vulnerability of the parser.c component in the Keepalived network traffic balancing system is related to the situation where the operation results in values exceeding the memory buffer limits. Exploiting this vulnerability could allow an attacker to cause a service failure...

Google Chrome Heap Buffer Overflow DoS

The vulnerability in the Google Chrome web browser is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure through the use of a specially created PDF file...

CVE-2026-43044

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as...

JLSEC-2026-321

HDF5 Library through 1.14.3 has a heap buffer overflow in H5Omtimenewencode in H5Omtime.c...

ROS-20260429-73-0026

A vulnerability in the pgcrypto component of the PostgreSQL database management system is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

JLSEC-2026-288 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal...

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

PT-2026-39173

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the inatomic function in the Linux operating system’s kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

XZ Compression Package Code Execution

The vulnerability of the lzmaindexAppend function in the XZ Utils data compression package is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome V8 Engine Unauthorized Access

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

CVE-2026-31448

A flaw was found in the Linux kernel's ext4 filesystem. When creating a directory or node, if an extent insertion fails, the system may not properly clear residual data. This can lead to a situation where both directory and extended attribute xattr blocks simultaneously use the same memory buffer...

Pillow Heap Buffer Overflow DoS

The vulnerability of the Python Pillow library for image processing is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011199 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO...

CVE-2026-6776: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

CVE-2026-6775: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150...

CVE-2026-6753: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

CVE-2026-6767: Improper Restriction of Operations within the Bounds of a Memory Buffer

Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

CVE-2026-6752: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...