check_icmp_dos-CVE-2018-4407-

Principio El principio consiste en hacer que otros campos del paquete "icmp" sean inválidos; cuando el kernel de macOS o iPhone los analiza, no se ha implementado la comprobación de tamaño, lo que provoca un crash. Dispositivos 1. Apple iOS 11 y versiones anteriores: todos los dispositivos 2. App...

AZL-99726 CVE-2026-86145 affecting package pcre2 10.42-3

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

CVE-2026-53720

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i32 implementation does not check the nbblocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i32 will write past the end of the buffer and possib...

CVE-2026-9805 FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

CVE-2026-9805

CVE-2026-9805 affects Insyde SMM firmware , specifically the IHISI command handler (FMTSWriteUseIntelLib) responsible for processing FMTS command 0x32 . The handler reads and writes data without validating buffer size, potentially leading to a buffer overflow . The CNA-assigned CVSS 3.1 score is ...

EUVD-2026-66226

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

CVE-2026-56003

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...

PT-2026-64279

Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description A classic buffer overflow occurs in the HCI socket transport because the system fails to verify if a received HCI event fits within the configured event pool before copying it. Exploitation...

UBUNTU-CVE-2026-56003

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...

Linux Distros Unpatched Vulnerability : CVE-2026-53004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix OOB write to userspace in sctpgetsockoptpeerauthchunks sctpgetsockoptpeerauthchunks checks that the caller's optval buffer is large enough for the pee...

CVE-2025-47404 Buffer Copy Without Checking Size of Input in Automotive Audio

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified...

CVE-2025-70252

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability...

Tenda AC6 安全漏洞

Tenda AC6 is a wireless router produced by the Chinese company Tenda. The Tenda AC6V2.0 V15.03.06.23multi version has a security vulnerability. This vulnerability stems from the lack of size checking in the/goform/WifiWpsStart component, which may lead to a stack overflow issue...

PT-2026-21326

Name of the Vulnerable Software and Affected Versions SAIL affected versions not specified Description SAIL is a cross-platform library used for loading and saving images, supporting animation, metadata, and ICC profiles. The software contains a flaw due to the XWD parser's handling of the bytes...

The vulnerability of the bpf_basertt() function in the samples/bpf/tcp_basertt_kern.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bpfbasertt function in the samples/bpf/tcpbaserttkern.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system...

CVE-2018-21065

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x software. There is an integer underflow in eCryptFS because of a missing size check. The Samsung ID is SVE-2017-11855 August 2018...

CVE-2021-0878

In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50282)

drm/amdgpu: add missing size check in amdgpudebugfsgprwaveread Avoid a possible buffer overflow if size is larger than 4K. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...

EUVD-2025-34216

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution...

The vulnerability of the mnt_get_count() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mntgetcount function in the Linux operating system’s kernel is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...