406012 matches found
The vulnerability of the ems_usb_read_bulk_callback() function in the drivers/net/can/usb/ems_usb.c module of the Linux network device driver allows a attacker to cause a service failure.
The vulnerability of the emsusbreadbulkcallback function in the drivers/net/can/usb/emsusb.c module of the Linux network device driver framework is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failur...
The vulnerability of the btusb_work() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver allows a attacker to cause a service failure.
The vulnerability of the btusbwork function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver lies in a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the x509_process_extension() function in the crypto/asymmetric_keys/x509_cert_parser.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the x509processextension function in the crypto/asymmetrickeys/x509certparser.c module of the Linux kernel’s cryptographic subsystem is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the `prepare_playback_urb()` function in the sound/usb/pcm.c module, which supports USB audio devices in Linux operating systems, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the prepareplaybackurb function in the sound/usb/pcm.c module, which supports USB audio devices in Linux operating systems, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...
ALSA-2026:59487 Important: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...
AlmaLinux 8 : gstreamer1-plugins-good (ALSA-2026:59179)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59179 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution vi...
RockyLinux 10 : gstreamer1-plugins-base (RLSA-2026:59097)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59097 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 Tenable has extracted the preceding description block directl...
Linux Distros Unpatched Vulnerability : CVE-2026-78465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes...
RHEL 10 : gstreamer1-plugins-base (RHSA-2026:59097)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59097 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...
EulerOS Virtualization 2.13.0 : httpd (EulerOS-SA-2026-3215)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...
CVE-2026-39113
CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension (ext/misc/sqlar.c). On LP64 systems, invoking sqlar_uncompress() with a controlled compressed blob and size allows zlib to write beyond a heap allocation, causing a denial of service . The flaw was introduced on 2026-03...
PT-2026-81118
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.1.0 through 3.2.10 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description An integer overflow occurs during an int32 t multiplication within the unpack sample table function of OpenEXRCore wh...
nginx security update
1.26.3-6.0.1.el102.6 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.6 - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of...
PT-2026-81896
A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...
PT-2026-81783
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow exists in Chromium, which allows a remote attacker to read memory within the sandbox by using a specially crafted file. Recommendations Update Google Chrome to versi...
CVE-2026-39113
Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...
EulerOS Virtualization 2.13.1 : lcms2 (EulerOS-SA-2026-3178)
According to the versions of the lcms2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...
TencentOS Server 4: opensc (TSSA-2026:0853)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0853 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
The vulnerability of the function batadv_tt_prepare_tvlv_global_data() in the module net/batman-adv/translation-table.c, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the function batadvttpreparetvlvglobaldata in the module net/batman-adv/translation-table.c, which is part of the networking functions of the Linux kernel, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the...
