CVE-2026-102360 lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memory

A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...

Out-Of-Bounds Read

zstd-jni is vulnerable to an out-of-bounds read. The vulnerability is due to the ZstdDictDecompress constructor not validating the offset and length arguments against the dictionary array bounds, which allows an attacker to provide arbitrary values to read memory beyond the supplied array and...

CVE-2026-96420

A flaw was found in Wireshark. An attacker could exploit this vulnerability by enticing a user to open a specially crafted Toshiba capture file, triggering a buffer over-read in the Toshiba file parser. This issue causes the application to crash, leading to a Denial of Service DoS. Mitigation...

CVE-2026-95509 Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...

CVE-2026-95509

The Qt for MCUs framework is vulnerable to an out-of-bounds read due to an incorrect buffer size calculation during String.arg() formatting. This issue specifically affects strings optimized for Latin-1 characters when displaying Latin-1 characters. The vulnerability can result in an out-of-bound...

CVE-2026-95509 Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...

CVE-2026-97408

A flaw was found in the Linux kernel's Bluetooth subsystem. The Logical Link Control and Adaptation Protocol L2CAP implementation fails to properly validate the payload length of connectionless frames before reading the Protocol/Service Multiplexer PSM field. An adjacent attacker within Bluetooth...

CVE-2026-97587

A flaw was found in the Linux kernel's RISC-V performance monitoring perf subsystem. On 32-bit RISC-V systems, the available counter mask was stored in a 32-bit data structure while the subsystem iterated over up to 64 counters, resulting in an out-of-bounds memory read. A local user could exploi...

Exploit for Out-of-bounds Read in Linux Linux_Kernel

Linux container escape PoCs Target-specific proof-of-concept...

CVE-2026-10518 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with guest-level permissions to read private security policy content they were not authoriz...

intigriti-0926-writeup

Intigriti Challenge 0926 — Critter Gallery: UNION-based SQL In...

CVE-2026-95392 Buffer Over-read in Wireshark

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95392

Wireshark is affected by a buffer over-read vulnerability in the MBIM protocol dissector . This flaw impacts versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 , potentially allowing an attacker to cause a denial of service (DoS) . Remediation involves updating to the latest version, specifically 4.6.9 ...

CVE-2026-95392 Buffer Over-read in Wireshark

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95392 Buffer Over-read in Wireshark

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-96420 Buffer Over-read in Wireshark

Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-96420

A buffer over-read vulnerability exists in the Toshiba file parser within Wireshark . This flaw can be exploited to cause a denial of service (DoS) . The affected versions include 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 . To remediate this issue, users should update to the latest version, specifically...

CVE-2026-96420 Buffer Over-read in Wireshark

Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-96420 Buffer Over-read in Wireshark

Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

BIT-RABBITMQ-C-2026-44235 rabbitmq-c: size_t underflow in AMQP frame length computation leads to out-of-bounds read

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause unsigned sizet underflow in amqphandleinput in librabbitmq/amqpconnection.c. The parser subtracts HEADERSIZE, fixed...