188900 matches found
CVE-2026-101201
A flaw was found in Qt. An out-of-bounds read vulnerability can occur when parsing a binary file with a malformed header in the QBinaryJson::fromBinaryData function. An attacker could exploit this flaw by convincing a user or application to process a specially crafted binary file, causing the...
CVE-2026-101201
A malformed header in the binary file fed to QBinaryJson::fromBinaryData can cause undefined behaviour because of out-of-bounds read...
CopyFile_CVE-2026-31431
CopyFileCVE-2026-31431 Copy Fail CVE-2026-31431 – Local Privilege Escalation Exploit A logic bug in the Linux kernel’s authencesn AEAD template allows an unprivileged user to write 4 controlled bytes into the page cache of any readable file. The provided Python script corrupts /usr/bin/su in memo...
CVE-2026-8461
🎬 CVE-2026-8461 — PixelSmash Critical Out-of-Bounds Write in FFmpeg MagicYUV Decoder A malicious video file can become a weapon. PixelSmash is a critical memory corruption vulnerability affecting FFmpeg's MagicYUV decoder that allows an attacker to trigger an out-of-bounds write , resulting in...
EUVD-2026-104838
A malformed header in the binary file fed to QBinaryJson::fromBinaryData can cause undefined behaviour because of out-of-bounds read...
CVE-2026-98711
A flaw was found in the Linux kernel's cw1200 wireless network driver. During data transmission, the driver pads transfer sizes to meet hardware alignment requirements without reserving sufficient space in the frame buffer. This causes the driver to read beyond the buffer boundaries and transmit...
CVE-2018-4407
CVE-2018-4407 Kernel crash caused by out-of-bounds write in Apple's ICMP packet-handling code CVE-2018-4407 for iOS 11.0，11.2，11.3.1...
exploits
exploits CVE-2021-22600: Linux kernel LPE exploit CVE-2021-3156: Linux local privilege escalation through heap overflow in sudo Demo CVE-2021-3156: One shot exploit for heap overflow vulnerability in sudo CVE-2020-6507: Out of bounds write in V8. Chrome versions = 83.0.4103.97. RCE CVE-2020-16040...
Important: Red Hat Security Advisory: postgresql:18 security update
An update for the postgresql:18 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...
CVE-2023-35001
nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage Build $ make Run $ ./exploit This produces a lpe.zip file...
pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...
Important: Red Hat Security Advisory: postgresql:16 security update
An update for the postgresql:16 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2025-5777
CVE-2025-5777 — Citrix NetScaler "CitrixBleed 2" Memory Disclosure Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. The sequel to the original CitrixBleed: an out-of-bounds read on NetScaler ADC/Gateway authentication endpoints that...
CVE-2021-1732
CVE-2021-1732 The vulnerability occurs in the Windows graphics driver win32kfull!NtUserCreateWindowEx function due to a desynchronization between kernel callback user-mode memory allocation and the setting of the tagWND-flag attribute. This allows an attacker to forge the tagWND-offset value,...
CVE-2026-98597
A flaw was found in the Linux kernel's sr9700 USB Ethernet driver. When processing incoming packets, the driver fails to properly account for packet header overhead during buffer length validation. An attacker capable of sending crafted packet data could trigger an out-of-bounds read, leading to ...
CVE-2026-98591
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. An integer underflow in the bounds-checking logic for network packet buffer pointers allows validation checks to pass incorrectly. A local user capable of running BPF programs could exploit this flaw to create pointers...
CVE-2026-98590
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. An error in context code generation incorrectly sign-extends register values when reading socket queue mappings, causing runtime register values to exceed boundaries tracked by the kernel's safety verifier. A local user...
CVE-2026-109831
UnRTF by GNU Project is vulnerable to an out-of-bounds write (CWE-787). If a user opens a specially crafted RTF file provided by an attacker, it may result in a denial-of-service (DoS) condition. No specific affected versions, remediation details, or exploit information are provided in the docume...