CVE-2026-120757

A flaw was found in HDF5. When traversing external links, the library fails to validate the length of user-supplied link data, resulting in a heap buffer over-read. By convincing a user or application to open a specially crafted HDF5 file containing a malformed external link, an attacker can caus...

CVE-2026-118446

A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects, including NDOPERAND arrays. These arrays are exposed as Python lists whose elements reference memory owned by the parent INSTRUX object. Retaining a list or an element does not keep t...

CVE-2026-118445

A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objects. These members are exposed through Python objects that reference memory owned by the parent INSTRUX object. A retained reference to a member does not keep the parent allocation...

EUVD-2026-115702

A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects, including NDOPERAND arrays. These arrays are exposed as Python lists whose elements reference memory owned by the parent INSTRUX object. Retaining a list or an element does not keep t...

CVE-2026-118446

The pybddisasm Python bindings are affected by a use-after-free vulnerability (CWE-416) in the array-valued members of INSTRUX objects, such as ND_OPERAND arrays. These arrays are exposed as Python lists where elements reference memory owned by the parent INSTRUX object. Because retaining a list ...

CVE-2026-118446 Use-after-free in INSTRUX array members in pybddisasm

A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects, including NDOPERAND arrays. These arrays are exposed as Python lists whose elements reference memory owned by the parent INSTRUX object. Retaining a list or an element does not keep t...

CVE-2026-118445

The pybddisasm Python bindings contain a use-after-free vulnerability affecting structure-valued members of INSTRUX objects. The issue occurs because these members are exposed through Python objects that reference memory owned by a parent INSTRUX object; however, retaining a reference to a member...

CVE-2026-118445 Use-after-free in INSTRUX structure members in pybddisasm

A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objects. These members are exposed through Python objects that reference memory owned by the parent INSTRUX object. A retained reference to a member does not keep the parent allocation...

EUVD-2026-115703

A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objects. These members are exposed through Python objects that reference memory owned by the parent INSTRUX object. A retained reference to a member does not keep the parent allocation...

CVE-2026-99091

A flaw was found in the Linux kernel's Bluetooth subsystem. When pending management commands are flushed during an adapter power-off or device removal event, the kernel incorrectly reports command status values using internal memory pointer data instead of the intended error code. A local user ca...

CVE-2026-89852

A flaw was found in scsi: qla2xxx. An uninitialized mailbox structure mbxcmdt can lead to the exposure of kernel stack memory to userspace. This occurs when the qla2x00getfirmwarestate function copies uninitialized mailbox register values, which are not properly written due to early return paths ...

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable in the cdxldecodeham8 or cdxldecodeham6 functions when processing type-0 CDXL files with HAM pixels that select uninitialized newpalette entries. An attacker can expose stack memory contents, including...

heartbleed-vulnerability-exploitation

heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...

CVE-2026-118475

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...

CVE-2026-119721

A flaw was found in Blender. This issue occurs when reading project data blocks due to missing length validation, resulting in an out-of-bounds read. By tricking a user into opening, browsing, or appending data from a specially crafted Blender file .blend, an attacker can trigger this...

CVE-2026-104063

A flaw was found in Scribus. When decoding planar pixel data in the Mac PICT image loader, the application does not properly validate image dimensions, leading to an out-of-bounds read vulnerability. By convincing a user to import or open a specially crafted PICT file, an attacker can trigger an...

DEBIAN-CVE-2026-118475

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...

CVE-2026-118475

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...

UBUNTU-CVE-2026-118475

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...

CVE-2026-118475 Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...