9 matches found
CVE-2026-85769
CVE-2026-85769 libtpms TPM 2.0 휘발성 상태 역직렬화에서의 힙 범위 밖 읽기Heap out-of-bounds read. blockskipread의 무제한 선택적 블록 건너뛰기가 언마샬unmarshal 커서를 공격자가 제어하는 16비트 길이만큼 전진시키고, 부호 있는 남은 크기 카운터를 음수로 만듭니다. 이후 모든 다운스트림 경계 검사는 그 부호 있는 값을 부호 없는 값으로 캐스팅하기 때문에 모두 통과합니다. 위조되고 자체 체크섬이 적용된 휘발성 상태 블롭blob이...
CVE-2026-62959
Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a plaintext-TCP listener, an unauthenticated remote client can send a single ordinary HTTP GET request and receive a 301 response whose Location...
libsoup security update
An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...
ALSA-2026:2216 Important: libsoup security update
The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication CVE-2026-0719 libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response...
EUVD-2023-31788
Malicious code in bioql PyPI...
CVE-2025-24792 Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Error
Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects PDO extension to connect to the Snowflake database. Snowflake discovered and remediated a vulnerability in the Snowflake PHP PDO Driver where executing unsupported queries like PUT or GET on stages causes a signed-to-unsigned...
CVE-2023-5184 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...
