cve-2026-64725-poc

仓库里有什么？ 这是针对 CVE-2026-64725 的一个 PoC。有关详细信息，请参阅 源代码 和 博客文章。 如何复现？ 平台 已在 macOS 26.4.1（build 25E253；Darwin 25.4.0 xnu-12377.101.151；Apple Silicon T8103 / M1）上发现。 Apple 确认 macOS/iOS/iPadOS 26.6 均存在漏洞。 PoC 1. 确保你的 Mac 运行的是最新版 macOS 2. 确保你已安装 Python 3.6+ 和 clang 3. 将仓库克隆到你的 Mac 上 4. 生成一个最小化的畸形 AIFF...

Linux Distros Unpatched Vulnerability : CVE-2026-43316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: solo6x10: Check for out of bounds chipid Clang with CONFIGUBSANSHIFT=y noticed a condition where a signed type literal 1 is an int could end up being...

PT-2025-41016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the lib/fonts module related to undefined behavior in a bit shift operation within the get default font function. Specifically, shifting a signe...

CVE-2022-50403

In the Linux kernel, the following vulnerability has been resolved: ext4: fix undefined behavior in bit shift for ext4checkflagvalues Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds i...

CVE-2022-50390 drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix undefined behavior in bit shift for TTMTTFLAGPRIVPOPULATED Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN:...

SUSE CVE-2025-39685

In the Linux kernel, the following vulnerability has been resolved: comedi: pcl726: Prevent invalid irq number The reproducer passed in an irq number0x80008000 that was too large, which triggered the oob. Added an interrupt number check to prevent users from passing in an irq number that was too...

Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86\_64

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gw5p-q8mj-p7gh. For more information see the GitHub-hosted security advisory...