CVE-2026-111152

Game Music Emu libgme through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader getdata function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via...

EUVD-2025-211112

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

Wazuh MasterHandler Process Files from Worker Code Execution

The vulnerability of the MasterHandler.processfilesfromworker function on the platform for security monitoring and threat detection by Wazuh is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute...

Nginx MCP Config Add Data Compromise

The vulnerability of the nginxconfigadd function in the MCP component of the Nginx UI server’s user interface relates to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

Linux kernel function setup_sgio_components() Data Compromise

The vulnerability of the setupsgiocomponents function in the drivers/crypto/marvell/octeontx/otxcptvfreqmgr.c file of the Linux kernel is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Linux nfsd4 DropRevokedStid() DoS

The vulnerability of the nfsd4 DropRevokedStid function in the fs/nfsd/nfs4state.c component of the Linux operating system is related to insufficient resource control with dynamic management. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Linux kernel debug_lockres_open Heap Buffer Overflow DoS

The vulnerability of the debuglockresopen function in the fs/ocfs2/dlm/dlmdebug.c component of the Linux kernel is related to the pointer being reclaimed after its validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux fs/ocfs2/alloc.c Heap Buffer Overflow DoS

The vulnerability of the ocfs2trimmainbm function in the fs/ocfs2/alloc.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected informatio...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kfddqmsuspendbadqueuemes function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Linux operating system is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow an attacker to cause a service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the drmsyncobjfindfence function in the drivers/gpu/drm/drmsyncobj.c kernel module of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux snp_filter_reserved_mem_regions Heap Buffer Overflow DoS

The vulnerability of the snpfilterreservedmemregions function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel vduse_dev_open Heap Buffer Overflow DoS

The vulnerability of the vdusedevopen function in the drivers/vdpa/vdpauser/vdusedev.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux net/bluetooth hci_read_codec_capabilities Buffer Overflow

The vulnerability of the hcireadcodeccapabilities function in the net/bluetooth/hcicodec.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the allocmtkintrurb function in the drivers/bluetooth/btmtk.c kernel module of the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the isvmareahugepages function in the include/linux/vmalloc.h header of the Linux kernel is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux watchdog DoS

The vulnerability of the watchdogunregisterdevice function in the drivers/watchdog/watchdogcore.c component of the Linux operating system’s kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to trigger a service failure...

rtw89_update_6ghz_rnr_chan_ax Heap Buffer Overflow DoS

The vulnerability of the rtw89update6ghzrnrchanax function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-109383

undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

ROS-20261016-73-0003

The vulnerability of the ipv4senddestunreach function in the net/ipv4/route.c module of the Linux kernel is related to the assignment of zero pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...