7 matches found
CVE-2026-80552
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing...
CVE-2026-17113
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-42500
A flaw was found in golang.org/x/image/bmp. A remote attacker could exploit this vulnerability by providing a specially crafted paletted BMP Bitmap file. Decoding this file with an out-of-range palette index causes the application to panic when accessing invalid image pixels, leading to a Denial ...
UBUNTU-CVE-2026-42500
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image...
PT-2023-25523 · Unknown +1 · Disintegration Imaging +1
Name of the Vulnerable Software and Affected Versions: Disintegration Imaging version 1.6.2 Description: The issue allows attackers to cause a panic due to an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. It is unclear whether there...
SUSE CVE-2007-3642
The decodechoice function in net/netfilter/nfconntrackh323asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to cause a denial of service crash via an encoded, out-of-range index value for a choice field, which triggers a NULL pointer...
