Incorrect Conversion between Numeric Types

Overview Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types in the builder process when handling NUL-embedded document keys. An attacker can cause the application to read memory outside the intended buffer and terminate the calling process by supplying ...

CVE-2026-80749

In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given audio infoframe into the connector's copy but using the size of the destination a generic target, sized to accept many different data blocks...

CVE-2026-80749 drm/connector/hdmi: Fix out of bounds memory read

In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given audio infoframe into the connector's copy but using the size of the destination a generic target, sized to accept many different data blocks...

PT-2026-85241

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description An out of bounds read exists in the CrashReporting component. This allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using ...

CVE-2026-75137

UpSignOn for Windows versions before 7.19.0 are affected by a sensitive data exposure vulnerability in process memory after the application has been locked. A local attacker with the PROCESS_VM_READ permission can read the memory space of UpSignOn.exe and extract cleartext vault data, including e...

EUVD-2026-70262

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the application has been locked. Attackers can use the PROCESSVMREAD permission to read the memory space of UpSignOn.exe a...

SUSE CVE-2026-72444

In the Linux kernel, the following vulnerability has been resolved: flowdissector: check device type before reading ETHADDRS skbflowdissect unconditionally reads 12 bytes from ethhdrskb when FLOWDISSECTORKEYETHADDRS is requested. This assumes the skb has a valid Ethernet header at macheader, whic...

CVE-2026-84484

ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger...

EUVD-2026-69796

ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger...

CVE-2026-84484 ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv

ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger...

CVE-2026-84484

ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function. An unauthenticated remote attacker can send a UDP datagram to the LTP link service input port with a truncated SDNV value, triggering reads up to nine bytes past buffer boundaries and underflowin...

CVE-2026-84696: Missing Authentication for Critical Function

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...

ROS-20260902-73-0020

The vulnerability in perl-DBI is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-84267

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

CVE-2026-80649

A flaw was found in the Linux kernel's System Control and Management Interface SCMI power management. The scmipowernameget function fails to validate the domain number provided by an external caller. This oversight can lead to an out-of-bounds access, potentially allowing an attacker to read or...

PT-2026-84307

Name of the Vulnerable Software and Affected Versions gvfs affected versions not specified Description A flaw in the SFTP backend allows a malicious SFTP server to cause the read string function to allocate a buffer without verifying if it is completely filled. This leaves the remainder of the...

ROS-20260901-73-0006

The vulnerability of the urldecode function in the PHP programming language is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2023-31308: Improper Validation of Array Index

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...

ROS-20260831-73-0022

The vulnerability in PHP is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-80603 netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...