CVE-2026-105842

The lrzsz utility (versions before 0.13.0 ) is vulnerable to a heap-based buffer overflow within the procheader() function of the lrz receive utility. The flaw occurs when the utility copies overlong, sender-supplied filenames (up to 8192 bytes) into Pathname . Specifically, the overflow is trigg...

CVE-2026-105842

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

CVE-2026-105839 libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBOD

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...

CVE-2026-105839

The libmikmod library versions prior to 3.3.14 are vulnerable to a heap buffer overflow due to an integer overflow within the Oktalyzer loader function OKT_doPBOD(). An attacker can provide a crafted OKT module where the SLEN chunk wraps the 16-bit numtrk value, leading to PBOD writes beyond the ...

EUVD-2026-93391

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...

CVE-2026-105839 libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBOD

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...

CVE-2026-105839 libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBOD

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...

CVE-2026-105839

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...

CVE-2026-105837 libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

CVE-2026-105837

The libmikmod library, prior to version 3.3.14 , is vulnerable to an integer overflow in the DSM_Load() function located in load_dsm.c . An attacker can provide a crafted DSM module where the product of numchn and numpat wraps a 16-bit value , triggering a heap buffer overflow . This memory corru...

EUVD-2026-93389

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

CVE-2026-105837 libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

CVE-2026-105837 libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

CVE-2026-105837

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

CVE-2024-26170-extended

CVE-2024-26170-extended исследование CVE-2024-26170 или cimfs.sys для поиска переполнений или ошибок, которые считаются zero-day...

CVE-2026-9256-POC

CVE-2026-9256-POC CVE-2026-9256 Nginx переполнение буфера в куче POC...

CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow

В рамках подготовки к OSCP я наткнулся на CVE-2009-3999 эксплойт переполнения буфера HP Power Manager 4.2 Build 7. Последняя версия скрипта обновлена для устранения проблем совместимости с Python 3, связанных с обработкой строк и байтов, что гарантирует передачу полезной нагрузки в виде...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Переполнение буфера кучи в NGINXngxhttprewritemodule Метрика| Значение ---|--- CVSS v4.0| 9.2 Критический CVSS v3.1| 8.1 Высокий — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| 122 — Переполнение буфера кучи Введена| Июнь 2008 — v0.6.27 Обнаружена| Апрель 2026 — DepthFirst...

CVE-2026-38422

CVE-2026-38422: Удалённое выполнение кода через комбинированные переполнения буфера в Tasmota fetchjpg CVE: CVE-2026-38422 Severity: Критический CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg Author: Saidakbarxo...

empty_list

emptylist - p0 이슈 1564 CVE-2018-4243 iOS 11.0 - 11.3.1 커널 읽기/쓰기 익스플로잇 @i41nbeer 버그: getvolattrlist은 fgetattrlist 시스템 콜을 통해 사용자 제어 bufferSize 인자를 받습니다. 속성 목록을 직렬화할 커널 버퍼를 할당할 때 다음과 같은 주석이 있습니다: / 속성 결과를 위한 대상 버퍼를 할당합니다. 호출자가 요청한 것보다 더 많이 복사하지 않으므로, 그들이 제공한 것보다 더 많이 할당할 필요가 없습니다. / ab.allocated =...