CVE-2026-110810

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whispermodelload of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position...

CLEANSTART-2026-KZ19518 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read

CVE-2025-47914 affects multiple packages. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. See references for individual vulnerability details...

kernel: svcrdma: Validate Read chunk positions before reconstruction

A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...

EUVD-2026-101742

GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout that allows remote attackers to read arbitrary files by supplying a branch name parsed as a git option. Attackers can host a repository whose default branch is named --pathspec-from-file=, causing cloning...

CVE-2026-110810 ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whispermodelload of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position...

CVE-2026-110810 ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whispermodelload of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position...

EUVD-2026-101800

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whispermodelload of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position...

CVE-2026-110810

The ggml-org whisper.cpp software (versions up to 1.9.4 ) contains an out-of-bounds read vulnerability in the Model Loader component. Specifically, the whisper_model_load function in src/whisper.cpp fails to properly handle the ttype argument, which can be manipulated to trigger the memory read. ...

PT-2026-115145

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp decode mask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that c...

Linux Distros Unpatched Vulnerability : CVE-2026-107816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could ...

Debian dla-4835 : libmariadb-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4835 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4835-1 [email protected]...

UBUNTU-CVE-2026-110656

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check after advancing past ':'. A malicious or spoofed UPnP gateway on the local network can send a device description or SOAP...

Linux Distros Unpatched Vulnerability : CVE-2026-106435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression...

UBUNTU-CVE-2026-93683

A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an...

Linux Distros Unpatched Vulnerability : CVE-2026-110736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader core/string/optimizedtranslation.cpp, OptimizedTranslation::getmessage...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tftp (UTSA-2026-130162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130162 advisory. A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass...

Rocky Linux 9 [CIQ] Security Update: pcre2 / pcre2-debuginfo / pcre2-debugsource / pcre2-devel / etc Multiple Vulnerabilities (crlsa-2026_81532)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202681532 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 PCRE2: PCRE2: Out-of-bounds read via...

CVE-2026-110598

Libyal libpff through 20260926 contains an integer underflow in libpffrecordentrygetmultivalue that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PTMVSTRING8, PTMVUNICODE or PTMVBINARY offsets ...

CVE-2026-110713

libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2decodefilefsvolumeinfo and smb2decodefilefsattributeinfo that allows malicious SMB servers to read past reply buffers. Attackers controlling a server or intercepting unsigned sessions can send crafted QUERYINFO replies wi...

PT-2026-114926

Name of the Vulnerable Software and Affected Versions Enterprise Architect version 17.1 Description The XSLT Debugger feature allows XML External Entity XXE injection. This occurs when the parser processes a crafted XML file containing a DOCTYPE with an external DTD reference, enabling an attacke...