Lucene search
+L

10 matches found

NVD
NVD
•added 2026/04/09 5:16 p.m.•13 views

CVE-2026-39855

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code pepagehashcalc. When page hash processing is performed on a PE file, the function...

5.5CVSS0.00198EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/04/09 5:16 p.m.•10 views

CVE-2026-39855

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code pepagehashcalc. When page hash processing is performed on a PE file, the function...

5.5CVSS5.9AI score0.00198EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/09 5:16 p.m.•19 views

UBUNTU-CVE-2026-39855

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code pepagehashcalc. When page hash processing is performed on a PE file, the function...

5.5CVSS6AI score0.00198EPSS
SaveExploits0References5
OSV
OSV
•added 2026/04/09 3:58 p.m.•14 views

CVE-2026-39855 osslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code pepagehashcalc. When page hash processing is performed on a PE file, the function...

5.5CVSS6.2AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/04/09 3:58 p.m.•27 views

EUVD-2026-20944

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code pepagehashcalc. When page hash processing is performed on a PE file, the function...

5.5CVSS6.1AI score0.00198EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/09 3:58 p.m.•4 views

CVE-2026-39855

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code pepagehashcalc. When page hash processing is performed on a PE file, the function...

5.5CVSS6.1AI score0.00198EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/04/09 3:58 p.m.•41 views

CVE-2026-39855

osslsigncode prior to 2.13 contains an integer underflow in the PE page-hash calculation (pe_page_hash_calc). If SizeOfHeaders (hdrsize) > SectionAlignment (pagesize), hdrsize is subtracted from pagesize without validation, producing a large unsigned length. The code allocates a zero-filled bu...

5.5CVSS6.1AI score0.00198EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/01/21 1:15 p.m.•10 views

AZL-67845 CVE-2024-57945 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the virtual address of vmemmap is calculated as: struct page VMEMMAPSTART - physrambase PAGESHIFT. And the struct page's va can be calculated with ...

7.8CVSS6.6AI score0.00212EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/21 1:15 p.m.•11 views

UBUNTU-CVE-2024-57945

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the virtual address of vmemmap is calculated as: struct page VMEMMAPSTART - physrambase PAGESHIFT. And the struct page's va can be calculated with ...

7.8CVSS6.2AI score0.00212EPSS
SaveExploits0References22
Cvelist
Cvelist
•added 2025/01/21 12:18 p.m.•37 views

CVE-2024-57945 riscv: mm: Fix the out of bound issue of vmemmap address

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the virtual address of vmemmap is calculated as: struct page VMEMMAPSTART - physrambase PAGESHIFT. And the struct page's va can be calculated with ...

7.8CVSS0.00212EPSS
SaveExploits0References5
Rows per page
Query Builder