176585 matches found
DEBIAN-CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-86867
Cinnamon's Kotaemon all versions up to and including v0.12.0 multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in libs/ktem/ktem/pages/chat/control.py that load a Conversation record by its ID...
CVE-2026-86930
An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...
CVE-2026-88840
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
UBUNTU-CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-96545
An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can copy adjacent heap contents in...
CVE-2026-96544
An integer overflow flaw was found in GIMP's PVR image loader. When a user opens a crafted PVR image, unchecked multiplication of attacker-controlled dimensions in pvrdecoderect can result in an undersized heap allocation followed by an out-of-bounds read. This may disclose adjacent heap contents...
RLSA-2026:69553 Low: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...
CVE-2026-52744 GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion API
GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines//upstream does not adequately authorize access to upstream dependency data. An authenticated user can retrieve inter-pipeline dependency hierarchy...
CVE-2026-88840
The BusyBox TLS implementation contains an out-of-bounds read vulnerability in the get_client_hello() function. The issue occurs when the software attempts to parse a truncated ClientHello message , causing the system to read past the end of the input buffer. This vulnerability is specifically as...
EUVD-2026-85513
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88840
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88840 Busybox: busybox: tls ssl_server reads one byte out of bounds when parsing truncated clienthello
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88840 Busybox: busybox: tls ssl_server reads one byte out of bounds when parsing truncated clienthello
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-88835
The BusyBox dpkg utility contains a vulnerability in the read_package_field() function. When processing malformed .deb packages , the function steps past a NUL terminator , resulting in an out-of-bounds heap read . The practical impact of this flaw is an out-of-bounds read, and the CVSS3.1 score ...
CVE-2026-88835 Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...