177345 matches found
thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line
A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed Internet Message Access Protocol IMAP line. This could lead to an out-of-bounds buffer read, potentially resulting in information disclosure or a denial of service...
thunderbird: One byte overflow read in mail parser
A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed mail header. This could lead to a one-byte read past the end of a buffer, potentially resulting in information disclosure or other unpredictable behavior...
thunderbird: Out-of-bounds read in IMAP response parser
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is...
Exploit for Out-of-bounds Read in Apple Macos
CVE-2026-84543: a remote kernel vulnerability in macOS SMBFS...
PT-2026-98227
Name of the Vulnerable Software and Affected Versions ESF-IDF version 5.5.5 ESF-IDF version 6.0.1 ESF-IDF version 6.1 Description The BlueDroid A2DP sink function btc a2dp sink handle inc media reads a timestamp field from the received media buffer without first validating that the packet layout...
CVE-2026-77825: Improper Limitation of a Pathname to a Restricted Directory
IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint GET /v1/admin/logs/file. The path confinement check uses str.startswith rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json...
CVE-2026-58004: Out-of-bounds Read
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...
CVE-2026-77193: Improper Limitation of a Pathname to a Restricted Directory
The eesyID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the id2wppath parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...
PT-2026-98141
Name of the Vulnerable Software and Affected Versions SumatraPDF versions prior to 3.6 Description The MobiDoc::ParseHeader function in src/MobiDoc.cpp validates records using kMobiHeaderMinLen, while DecodeMobiDocHeader creates a decoder sized for kMobiHeaderLen without verifying the actual...
CVE-2026-58005: Improper Restriction of Operations within the Bounds of a Memory Buffer
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...
CVE-2026-93246: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity rvuregisterinterrupts walks every MSI-X vector and uses strstr to match "Mbox" or "FLR" in irqname before pinning those interrupts to CPU 0. irqname is a per-vector...
CVE-2026-93828: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...
PT-2026-98062
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component regarding the parsing of Field Replaceable Unit FRU Product Information Area PIA data. The original implementation used an open-coded...
CVE-2026-97059
DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared NumberOfFrames. Attackers can craft malicious DICOM instances declaring more frames than the buffer contains to...
PT-2026-97802
Name of the Vulnerable Software and Affected Versions DCMTK versions prior to 3.7.1 Description A heap over-read occurs in the ConcatenationLoader when copying pixel data frames. The issue arises because the software fails to validate the PixelData buffer length against the declared NumberOfFrame...
PT-2026-97849
Name of the Vulnerable Software and Affected Versions pulpcore affected versions not specified Description A path traversal issue exists in the content upload API via the file url parameter. The system employs a validation check that rejects URLs starting with 'file://', but because Python's URL...
PT-2026-97828
Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description An out-of-bounds read issue occurs when a crafted oversized firmware image is processed, leading to an EL3 stack overflow during VAB authentication. This can result i...
AMD Compressonator SDK Vulnerabilities
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-40652| An out-of-bounds read condition in the AMD Compressonator SDK could allow a local attacker to supply a specially crafted Truevision Graphics Adapter TGA file to a user or an...
PT-2026-97721
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read issue exists in the graphics module. This occurs when the software reads data outside the intended boundary of a buffer, which may lead to ...