Linux kernel SMD Function Use-After-Free

The vulnerability of the wcn36xxsmdrspprocess function in the drivers/net/wireless/ath/wcn36xx/smd.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

Linux GPU Host1x pin_job() Buffer Overflow

The vulnerability of the pinjob function in the drivers/gpu/host1x/job.c component of the Linux kernel is related to improper handling of exceptional conditions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

rtw89_update_6ghz_rnr_chan_ax Heap Buffer Overflow DoS

The vulnerability of the rtw89update6ghzrnrchanax function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-116126

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf parse lfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gf parse lfrac to divide by zero, terminating the process with SIGFPE...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the athtxedmatasklet function in the drivers/net/wireless/ath/ath9k/xmit.c file of the Linux kernel is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

Linux wcn36xx_smd_print_reg_info_ind Heap Buffer Overflow DoS

The vulnerability of the wcn36xxsmdprintreginfoind function in the drivers/net/wireless/ath/wcn36xx/smd.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rtwpcirxnapi function in the drivers/net/wireless/realtek/rtw88/pci.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

PT-2026-115647

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, Reporting RCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes...

PT-2026-115662

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0 sta set current ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE ATWINC15X0...

PT-2026-115635

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux parse uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...

PT-2026-116125

A heap buffer overflow in the stbl AddSize function isomedia/stbl write.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-116143

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events...

Nginx UI Code Execution

The vulnerability of the nginxconfigadd function in the Nginx UI server’s user interface is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

PT-2026-116109

Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user auth function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as o...

CVE-2025-55640

GPAC MP4Box v2.4 is vulnerable to a heap buffer overflow in the stbl_AddSize function located in isomedia/stbl_write.c. An attacker can trigger a Denial of Service (DoS) by providing a specially crafted MP4 file. Remediation and specific exploit details are not provided in the documents.

CVE-2025-55653

GPAC MP4Box v2.4 contains a floating point exception within the gf_parse_lfrac function located in utils/error.c. The vulnerability is triggered when the software processes a crafted MP4 file containing a fraction string with a zero-denominator , causing the application to divide by zero. This re...

EUVD-2025-211111

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

FreeBSD: VID-05aadfcc-55f5-11f1-915c-8974b59277b5 (CVE-2026-46472): gstreamer1 -- multiple vulnerabilities

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

CVE-2026-46471

A heap-based buffer overflow vulnerability exists in GStreamer gst-plugins-good versions before 1.28.2 . The issue is located within the isomp4 plugin's qtdemux_parse_uuid function, which may read past the end of a heap-allocated buffer while parsing an MP4 file . This flaw could allow an attacke...