180450 matches found
CVE-2026-19673
The Zephyr RTOS Ethernet L2 layer contains an out-of-bounds read and net_buf length underflow in subsys/net/l2/ethernet/ethernet.c. When parsing a truncated VLAN header (ethertype 0x8100), the ethernet_recv() function fails to re-verify the buffer length when reinterpreting the header as an 18-by...
CVE-2026-19673 Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header
ethernetrecv in subsys/net/l2/ethernet/ethernet.c validates only that the first netbuf of a received frame holds a plain 14-byte struct netethhdr. When the ethertype is 0x8100 and VLAN is enabled on the interface, the same buffer is reinterpreted as the 18-byte struct netethvlanhdr without...
CVE-2026-101946 Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used
An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege attacker to disclose limited rpd process memory and disrupt an LDP adjacency via an IPv6 LDP message...
EUVD-2026-101324
An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege attacker to disclose limited rpd process memory and disrupt an LDP adjacency via an IPv6 LDP message...
CVE-2026-101946
An Out-of-bounds Read vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . An adjacent low-privilege attacker can exploit this by sending an IPv6 LDP message , potentially resulting in the disclosure of limited rpd process memory and the disruption of an LDP...
EUVD-2026-101484
A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...
CVE-2026-100236 Dpdk: dpdk: heap out-of-bounds read/write in gso header copy
A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...
CVE-2026-100236
A heap out-of-bounds read/write vulnerability exists in the DPDK GSO library . The issue occurs because the software GSO fails to verify if a packet header fits within the source first segment or the destination buffer during a copy to a new mbuf. A header exceeding the configured GSO segment siz...
CVE-2026-100236
A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...
CVE-2026-100236
A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...
USN-8930-1: U-Boot vulnerabilities
Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could possibly use this issue to trigger a buffer overflow, resulting in a denial of service or arbitrary code execution. CVE-2026-74220, CVE-2026-74221...
CVE-2026-103946 SQL Injection
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...
EUVD-2026-101441
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...
CVE-2026-103946
Tenable Nessus versions prior to 10.12.5 are affected by an SQL injection vulnerability (CVE-2026-103946 ). This flaw could allow an authenticated user to read or modify data stored within the Nessus application. The issue has been resolved in version 10.12.5 . While the vulnerability is confirme...
DEBIAN-CVE-2026-93683
A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an...
CVE-2026-110736
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader core/string/optimizedtranslation.cpp, OptimizedTranslation::getmessage. Offsets read from the hash table of a crafted .translation resource are used as indices into the bucket table without bounds validation;...
DEBIAN-CVE-2026-110736
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader core/string/optimizedtranslation.cpp, OptimizedTranslation::getmessage. Offsets read from the hash table of a crafted .translation resource are used as indices into the bucket table without bounds validation;...
CVE-2026-110661
CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFIreadnodeheader that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFIstridxc to scan past disknodedata,...
CVE-2026-110713
libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2decodefilefsvolumeinfo and smb2decodefilefsattributeinfo that allows malicious SMB servers to read past reply buffers. Attackers controlling a server or intercepting unsigned sessions can send crafted QUERYINFO replies wi...
CVE-2026-110714
libsmb2 through 6.2 contains an integer underflow vulnerability in decodeacl that allows malicious SMB servers to trigger heap out-of-bounds reads via crafted security descriptors. Attackers controlling a server or intercepting unsigned sessions can send an AclSize below 8 in a QUERYINFO reply,...