CVE-2025-48651: Improper Input Validation

In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-21376: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...

CVE-2025-47400: Buffer Over-read

Cryptographic issue while copying data to a destination buffer without validating its size...

CVE-2026-21374: Buffer Over-read

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation...

CVE-2026-31053: Double Free

A double free vulnerability exists in librz/bin/format/le/le.c in the function leloadfixuprecord. When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the...

CVE-2026-0049: Uncontrolled Resource Consumption

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-47392: Integer Overflow or Wraparound

Memory corruption when decoding corrupted satellite data files with invalid signature offsets...

CVE-2026-21371: Buffer Over-read

Memory Corruption when retrieving output buffer with insufficient size validation...

CVE-2026-21373: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...

CVE-2025-47391: Stack-based Buffer Overflow

Memory corruption while processing a frame request from user...

CVE-2026-21375: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...

CVE-2025-47390: Buffer Over-read

Memory corruption while preprocessing IOCTL request in JPEG driver...

CVE-2025-47389: Buffer Copy without Checking Size of Input

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation...

CVE-2026-21382: Buffer Copy without Checking Size of Input

Memory Corruption when handling power management requests with improperly sized input/output buffers...

CVE-2026-21372: Heap-based Buffer Overflow

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations...

CVE-2026-5638: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1. This issue affects some unknown processing. Performing a manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem...

CVE-2026-21367: Buffer Over-read

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans...

CVE-2026-21378: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...

EUVD-2018-21766

IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data into the 'From Addr' and 'To Addr' fields and trigger the crash by clicking the Start...

CVE-2018-25256

IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data into the 'From Addr' and 'To Addr' fields and trigger the crash by clicking the Start...