Lucene search
+L

48 matches found

Redos
Redos
•added 2026/09/21 12:00 a.m.•5 views

ROS-20260921-73-0098

The vulnerability of the ReadBlock function in the SquashFS file compressor and 7-Zip archive creator relates to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information...

8.1CVSS6AI score0.00495EPSS
SaveExploits1
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•12 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00171EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 5:53 a.m.•10 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

8.7CVSS5.5AI score0.00171EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/02 2:13 p.m.•15 views

PYSEC-2026-698 Out-of-bounds Read in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python 3.3.0.9 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the...

8.8CVSS6AI score0.01986EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
•added 2026/06/08 12:00 a.m.•17 views

The vulnerability of the ReadBlock() function in the SquashFS file processor of the 7-Zip archive creator allows a hacker to disclose protected information or cause service failures.

The vulnerability of the ReadBlock function, a handler for the SquashFS file compressor used by 7-Zip, relates to reading data outside of the permitted range in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

4.2CVSS5.7AI score0.00246EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/06/08 12:00 a.m.•14 views

The vulnerability of the ReadBlock function in the SquashFS file processor and 7-Zip archive creator allows a hacker to disclose confidential information.

The vulnerability of the ReadBlock function in the SquashFS file compressor and 7-Zip archive creator relates to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information...

5CVSS5.7AI score0.00495EPSS
SaveExploits1References4Affected Software2
Snyk
Snyk
•added 2026/06/05 4:46 p.m.•15 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the SquashFS ReadBlock function. An attacker can cause disclosure of heap memory contents by providing a specially crafted SquashFS archive with a manipulated node.Offset value, which bypasses fragment bounds check...

8.1CVSS5.4AI score0.00495EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/06/05 3:47 p.m.•24 views

CVE-2026-48092

A flaw was found in 7-Zip, a file archiver. This vulnerability, affecting 32-bit builds, involves a heap memory disclosure caused by an integer overflow in the SquashFS ReadBlock function. An attacker can exploit this by providing a specially crafted archive, which, when processed, allows the...

8.1CVSS5.5AI score0.00495EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/06/05 3:16 p.m.•13 views

CVE-2026-48092

7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass...

8.1CVSS6.2AI score0.00495EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2026/06/05 1:51 p.m.•27 views

CVE-2026-48092

7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass...

8.1CVSS5.6AI score0.00495EPSS
SaveExploits1References1
CVE
CVE
•added 2026/06/05 1:51 p.m.•126 views

CVE-2026-48092

CVE-2026-48092 affects 7-Zip versions 9.34 through 26.00 on 32-bit builds. The root cause is a 32-bit integer overflow in the SquashFS ReadBlock function, allowing an attacker-controlled node.Offset to bypass the fragment bounds check and cause memcpy to read heap memory into the extracted file, ...

8.1CVSS5.7AI score0.00495EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/03/19 12:00 a.m.•12 views

openSUSE 16 Security Update : ocaml (openSUSE-SU-2026:20368-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20368-1 advisory. - CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992 Tenable has extracted the preceding description...

7.9CVSS6.1AI score0.00323EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/17 10:41 a.m.•8 views

OPENSUSE-SU-2026:20368-1 Security update for ocaml

This update for ocaml fixes the following issues: - CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992...

7.9CVSS6.4AI score0.00323EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2026/03/06 12:00 a.m.•5 views

SUSE: Security Advisory (SUSE-SU-2026:0800-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.9CVSS5.8AI score0.00323EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/03/06 12:00 a.m.•7 views

SUSE SLES15 Security Update : ocaml (SUSE-SU-2026:0800-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0800-1 advisory. - CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992. Tenable has extracted the precedin...

7.9CVSS6.1AI score0.00323EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/03/06 12:00 a.m.•7 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ocaml (SUSE-SU-2026:0830-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0830-1 advisory. - CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992...

7.9CVSS6.1AI score0.00323EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/03/05 3:17 p.m.•15 views

Security update for ocaml

This update for ocaml fixes the following issues: CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

7.8CVSS6.5AI score0.00323EPSS
SaveExploits0References4
OSV
OSV
•added 2026/03/05 3:17 p.m.•7 views

SUSE-SU-2026:0830-1 Security update for ocaml

This update for ocaml fixes the following issues: - CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992...

7.9CVSS6.3AI score0.00323EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/03/04 12:33 p.m.•12 views

Security update for ocaml

This update for ocaml fixes the following issues: CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

7.8CVSS6.5AI score0.00323EPSS
SaveExploits0References4
OSV
OSV
•added 2026/03/04 12:33 p.m.•6 views

SUSE-SU-2026:0800-1 Security update for ocaml

This update for ocaml fixes the following issues: - CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992...

7.9CVSS6.5AI score0.00323EPSS
SaveExploits0References3
Rows per page
Query Builder