Lucene search
+L

22141 matches found

Vulnrichment
Vulnrichment
added 2026/06/11 6:15 p.m.10 views

CVE-2026-53702 Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpbcntminus1i the loop index instead of the sub-layer 0 CPB count cpbcntminus10 from the referenced...

6.5CVSS5.7AI score0.00228EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/11 6:15 p.m.10 views

CVE-2026-53702

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpbcntminus1i the loop index instead of the sub-layer 0 CPB count cpbcntminus10 from the referenced...

6.5CVSS5.7AI score0.00228EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/11 6:15 p.m.10 views

EUVD-2026-36295

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpbcntminus1i the loop index instead of the sub-layer 0 CPB count cpbcntminus10 from the referenced...

6.5CVSS5.7AI score0.00228EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/11 6:15 p.m.35 views

CVE-2026-53702

The issue CVE-2026-53702 affects the GStreamer H.265 codec parser library (gst-plugins-bad). During buffering period SEI parsing, the loop bound is derived from cpb_cnt_minus1[i] instead of cpb_cnt_minus1[0] from the referenced Sequence Parameter Set, causing writes beyond stack-allocated CPB del...

6.5CVSS5.8AI score0.00228EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/11 6:15 p.m.20 views

EUVD-2026-36294

An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gsth266parserparsepicturepartition gsth266parser.c, the loop iterates without checking that the slice index stays within bounds, writin...

6.5CVSS5.5AI score0.00206EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/11 6:15 p.m.52 views

CVE-2026-53701 Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parser

An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gsth266parserparsepicturepartition gsth266parser.c, the loop iterates without checking that the slice index stays within bounds, writin...

6.5CVSS0.00206EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/11 6:15 p.m.29 views

CVE-2026-53701

GStreamer: gst-plugins-bad H.266/VVC PPS picture partition parser (gst_h266_parser_parse_picture_partition) contains an out-of-bounds write due to a bound-check omission in the multi-slice-in-tile processing. The loop may write beyond three fixed-size arrays (slice_height_in_ctus, slice_top_left_...

6.5CVSS5.5AI score0.00206EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/11 6:15 p.m.11 views

CVE-2026-53701

An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gsth266parserparsepicturepartition gsth266parser.c, the loop iterates without checking that the slice index stays within bounds, writin...

6.5CVSS5.4AI score0.00206EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/11 6:7 p.m.12 views

CVE-2026-53702

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpbcntminus1i the loop index instead of the sub-layer 0 CPB count cpbcntminus10 from the referenced...

6.5CVSS5.2AI score0.00228EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/11 6:6 p.m.11 views

CVE-2026-53701

An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gsth266parserparsepicturepartition gsth266parser.c, the loop iterates without checking that the slice index stays within bounds, writin...

6.5CVSS5.2AI score0.00206EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/11 3:37 p.m.24 views

Security Bulletin: Vulnarability in jackson-core library (WS-2026-0003) affects Power HMC.

Summary The jackson-core library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details ID:WS-2026-0003 DESCRIPTION: The non-blocking async JSON parser in jackson-core bypasses the maxNumberLength constraint default: 1000 characters defined i...

5.5AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/11 2:59 p.m.20 views

CVE-2026-52759

Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service. An attacker can supply a crafted Mach-O binary with an arbitrarily large ncmds load command count value, forcing the parser to allocate...

6.7CVSS5.5AI score0.00151EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2026/06/11 11:13 a.m.14 views

SUSE CVE-2026-53464

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...

4CVSS5.2AI score0.00111EPSS
SaveExploits0References7
NVD
NVD
added 2026/06/11 7:16 a.m.40 views

CVE-2026-40998

Jaxp13XPathTemplate evaluated XPath expressions for StreamSource and SAXSource inputs using a code path that parsed attacker-controlled XML with the JDK's default DocumentBuilderFactory behavior instead of Spring's hardened parser configuration. Applications that evaluate XPath against untrusted...

8.2CVSS0.00352EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/06/11 6:10 a.m.9 views

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview org.springframework.webflow:spring-webflow is a maven plugin for Spring Web Flow. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' via the WebFlowELExpressionParser...

7.2CVSS5.8AI score0.00225EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/11 5:2 a.m.11 views

CVE-2026-40985 Data Binding Vulnerability in Spring Web Flow with Unified EL Parser

Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1...

6.4CVSS5.5AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/11 5:2 a.m.53 views

CVE-2026-40985

CVE-2026-40985 affects Spring Web Flow where configurations use the WebFlowELExpressionParser. The vulnerability arises from processing Unified EL expressions, allowing a crafted expression to influence behavior. Affected versions are Spring Web Flow 4.0.0; 3.0.0–3.0.1; and 2.5.0–2.5.1. The conne...

6.4CVSS5.5AI score0.00225EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/11 2:59 a.m.15 views

CVE-2026-46532

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0, an out-of-bounds read exists in the BlueDroid AVRCP vendor-command parser avrcparsvendorcmd in components/bt/host/bluedroid/stack/avrc/avrcparstg.c. This issue has been patched ...

4.6CVSS5.4AI score0.00228EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/11 12:32 a.m.14 views

EUVD-2026-36123

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length value without bounds validation. Attackers can send a...

8.7CVSS5.5AI score0.00348EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/06/11 12:0 a.m.18 views

gst-plugins-bad 缓冲区错误漏洞

gst-plugins-bad is a GStreamer open-source plugin. gst-plugins-bad has a buffer error vulnerability, which stems from the multiple slice processing loop in the gsth266 parser’s gsth266parserparsepicturepartition function. This loop does not check whether the slice index exceeds the boundary. When...

6.5CVSS5.6AI score0.00206EPSS
SaveExploits0References1
Rows per page
Query Builder