3 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-31696
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpcpreparse, there are two paths for parsing key payloads: the XDR path for large...
UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable
uefi-firmware contains a stack out-of-bounds write vulnerability in the native tiano/EFI decompressor. in uefifirmware/compression/Tiano/Decompress.c, MakeTable does not validate that bit-length values read from the compressed bitstream are within the expected range 0..16. a crafted firmware blob...
CLSA-2022-1668467919 php: Fix of 3 CVEs
CVE-2022-37454: Fix buffer overflow in the Keccak XKCP SHA-3 reference implementation - CVE-2022-31630: Fix OOB read due to insufficient input validation in imageloadfont - CVE-2021-21707: Fix improper handlig of special character which breaks path in xml parsing...