CVE-2026-21371

CVE-2026-21371 is described as memory corruption due to insufficient size validation when retrieving an output buffer. The CVELIST entry identifies the affected component as the WinBlast Driver and labels the issue as a buffer over-read. The NVD entry repeats the same description. The provided me...

CVE-2026-21371 Buffer Over-read in WinBlast Driver

Memory Corruption when retrieving output buffer with insufficient size validation...

CVE-2026-21371 Buffer Over-read in WinBlast Driver

Memory Corruption when retrieving output buffer with insufficient size validation...

CVE-2026-21367 Buffer Over-read in WLAN Firmware

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans...

CVE-2026-21367 Buffer Over-read in WLAN Firmware

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans...

CVE-2025-47400 Buffer Over-read in Computer Vision

Cryptographic issue while copying data to a destination buffer without validating its size...

CVE-2025-47400

CVE-2025-47400 concerns a cryptographic issue caused by copying data to a destination buffer without validating the destination size, resulting in a buffer over-read in the Computer Vision component. The CVSS (3.1) vectors indicate Local attack vector, Low attack complexity, Low privileges, with ...

CVE-2025-47390

CVE-2025-47390 describes memory corruption during preprocessing of an IOCTL request in the JPEG driver (also referenced as a Camera-related issue). The vulnerability is categorized with high impact (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and requires local access with low privileges; ther...

CVE-2025-47390 Buffer Over-read in Camera

Memory corruption while preprocessing IOCTL request in JPEG driver...

CVE-2025-47390 Buffer Over-read in Camera

Memory corruption while preprocessing IOCTL request in JPEG driver...

PT-2026-33835

Name of the Vulnerable Software and Affected Versions ovn-controller affected versions not specified Description A heap over-read occurs when generating ICMP Destination Unreachable or Packet Too Big responses. The handler copies a portion of the original packet into the ICMP error body using the...

FreeRDP Buffer Overflow DoS

The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

GNU Binutils Buffer Overflow Information Disclosure

The vulnerability of the GNU Binutils development tool lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...

FreeRDP Buffer Overflow DoS

The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

Tenda CH22 Code Execution

The vulnerability of the formCertLocalPrecreate function in the Tenda CH22 microprogramming system lies in the reading of data beyond the buffer boundaries in memory when processing the standard parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending...

JLSEC-2026-39

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes...

PT-2026-53872

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A buffer over-read occurs in the g io channel read line backend function within the giochannel.c file. This happens when a custom line terminator with a length greater than one is configured,...

ROS-20260403-73-0022

A vulnerability in the uvcvideo component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability allows an attacker to cause a denial of service...

Security update for wireshark

This update for wireshark fixes the following issues: Update Wireshark to version 4.6.4 jscPED-15400. CVE-2024-9780: ITS dissector crash bsc1231475. CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash bsc1231476. CVE-2024-11595: Loop with Unreachable Exit Condition 'Infinite Loop' in...

SUSE SLES12 Security Update : freerdp (SUSE-SU-2026:1165-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1165-1 advisory. - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. -...