CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38754

A heap overflow in the ifsbreakup function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

PT-2026-60314

Name of the Vulnerable Software and Affected Versions Busybox version 1.38.0 Description A heap overflow occurs in the evalcommand function shell/ash.c, which can be triggered by providing crafted input, leading to a Denial of Service DoS. A heap overflow is a memory corruption issue where a...

PT-2026-60313

Name of the Vulnerable Software and Affected Versions Busybox version 1.38.0 Description A heap overflow occurs in the ifsbreakup function located in shell/ash.c. This issue allows attackers to cause a Denial of Service DoS by providing a specially crafted input. A heap overflow is a memory...

CVE-2026-38754

A heap overflow in the ifsbreakup function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...