14 matches found
AZL-98102 CVE-2026-80631 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...
SUSE CVE-2026-40246
free5GC is an open-source implementation of the 5G core network. In versions 1.4.2 and below of the UDR service, the handler for deleting Traffic Influence Subscriptions checks whether the influenceId path segment equals subs-to-notify, but does not return after sending the HTTP 404 response when...
EUVD-2015-7004
Malware in sbrugna...
EUVD-2015-7011
Malware in sbrugna...
CVE-2021-35110
Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile...
cryptsetup: Out-of-bounds write when validating segments
A flaw was found in the way cryptsetup parses encrypted images with invalid segments. This flaw allows a local attacker to crash an application compiled with cryptsetup, or in some cases, cause arbitrary code execution when parsing specially crafted encrypted images. The highest threat from this...
cryptsetup: Out-of-bounds write when validating segments
A flaw was found in the way cryptsetup parses encrypted images with invalid segments. This flaw allows a local attacker to crash an application compiled with cryptsetup, or in some cases, cause arbitrary code execution when parsing specially crafted encrypted images. The highest threat from this...
CVE-2015-7079
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2015-7072
dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2015-7079
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...
PT-2015-3126
Name of the Vulnerable Software and Affected Versions dyld in Apple iOS versions prior to 9.2 dyld in Apple tvOS versions prior to 9.1 dyld in Apple watchOS versions prior to 2.1 Description The issue exists due to insufficient input validation in the dyld component of the iOS operating system...
CVE-2015-7072: Improper Input Validation
dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...
PT-2015-3130
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple tvOS versions prior to 9.1 Description The issue exists due to insufficient input validation in the dyld component of the iOS operating system. This can be exploited by a remote attacker using a specially...