CVE-2026-88358

simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded. A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument to access buflen after the input buffer has been...

CVE-2026-93542

An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...

PT-2026-98007

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rsi hal load key function where tx mic key and rx mic key are copied from data16 and data24 regardless of the cipher being used. Since these offsets are specific t...

PT-2026-97828

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description An out-of-bounds read issue occurs when a crafted oversized firmware image is processed, leading to an EL3 stack overflow during VAB authentication. This can result i...

AMD Compressonator SDK Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-40652| An out-of-bounds read condition in the AMD Compressonator SDK could allow a local attacker to supply a specially crafted Truevision Graphics Adapter TGA file to a user or an...

PT-2026-97721

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read issue exists in the graphics module. This occurs when the software reads data outside the intended boundary of a buffer, which may lead to ...

CVE-2026-81645: Out-of-bounds Read

Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability...

ALSA-2026:71233 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: block: zero non-PI portion of auto integrity buffer CVE-2026-23007 kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite CVE-2026-53266...

PT-2026-97933

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the rvu register interrupts function when setting MSI-X irq affinity. The function iterates through MSI-X vectors and uses strstr to search for Mbox or FL...

AlmaLinux 8 : kernel-rt (ALSA-2026:71016)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:71016 advisory. kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto CVE-2026-63831...

CVE-2026-81508: Out-of-bounds Read

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

PT-2026-98227

Name of the Vulnerable Software and Affected Versions ESF-IDF version 5.5.5 ESF-IDF version 6.0.1 ESF-IDF version 6.1 Description The BlueDroid A2DP sink function btc a2dp sink handle inc media reads a timestamp field from the received media buffer without first validating that the packet layout...

CVE-2026-97437

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfsdiremit and hdrfinde The bounds check in ntfsdiremit compares fname-namelen a character count against e-size a byte count without accounting for the 2-byte-per-character UTF-16LE encoding or t...

CVE-2026-97437: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfsdiremit and hdrfinde The bounds check in ntfsdiremit compares fname-namelen a character count against e-size a byte count without accounting for the 2-byte-per-character UTF-16LE encoding or t...

PT-2026-104980

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs dir emit and hdr find e The bounds check in ntfs dir emit compares fname-name len a character count against e-size a byte count without accounting for the 2-byte-per-character UTF-16LE encodi...

CVE-2026-93234

In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate TV mode names before creating enum property The GUD protocol returns TV mode names as fixed-size GUDCONNECTORTVMODENAMELEN entries and requires each name to be NUL-terminated. gudconnectoraddtvmode currently...

CVE-2026-94281: Out-of-bounds Read

An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93541: Out-of-bounds Read

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

CVE-2026-93541

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...