CVE-2026-63868

The Linux kernel contains an unsigned integer underflow vulnerability in the garp_pdu_parse_attr function within the net: garp subsystem. The vulnerability occurs because the receive-side GARP attribute parser computes the data length (dlen) using reversed operands: dlen = sizeof(*ga) - ga->le...

CVE-2026-53245

In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrppduparsevecattr In mrppduparsevecattr, vector attribute events are encoded three per byte and valen tracks the number of events left to process. The parser decrements valen after...

OSV-2026-762 Heap-buffer-overflow in coap_pdu_parse_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513783540 Crash type: Heap-buffer-overflow READ 1 Crash state: coappduparseheader coappduparse2 coappduparse...

PT-2026-44166

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513783540 Crash type: Heap-buffer-overflow READ 1 Crash state: coap pdu parse header coap pdu parse2 coap pdu parse...

PT-2026-42899

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=512517700 Crash type: Heap-buffer-overflow READ 1 Crash state: coap pdu parse header coap pdu parse2 coap pdu parse...

PT-2021-28122

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow WRITE 1. It involves the functions coap pdu parse opt and coap pdu parse. No...

PT-2020-22089

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the coap opt length, coap pdu parse opt, and coap pdu parse functions. No...

UBUNTU-CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

PT-2015-7899

Name of the Vulnerable Software and Affected Versions net-snmp affected versions not specified Description A security issue was discovered in the snmp pdu parse function, which could leave incompletely parsed varBind variables in the list of variables. This flaw can be exploited by a remote,...