1112 matches found
CVE-2026-8461-EXP
CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...
CVE-2026-89319
JweDirectDecryptorBlock.Decrypt read a 64-bit plaintext length from the thalesaad protected-header field and used it without any validation. A truncated field panics binary.BigEndian.Uint64, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics with...
EUVD-2026-108652
JweDirectDecryptorBlock.Decrypt read a 64-bit plaintext length from the thalesaad protected-header field and used it without any validation. A truncated field panics binary.BigEndian.Uint64, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics with...
CVE-2026-89319
The JweDirectDecryptorBlock.Decrypt function is vulnerable to a flaw where it reads a 64-bit plaintext length from the _thales_aad protected-header field without performing any validation. This lack of input validation leads to three distinct failure states: a truncated field causes a binary.BigE...
CVE-2026-89319 JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation
JweDirectDecryptorBlock.Decrypt read a 64-bit plaintext length from the thalesaad protected-header field and used it without any validation. A truncated field panics binary.BigEndian.Uint64, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics with...
CVE-2026-65653
A flaw was found in github.com/temporalio/tchannel-go. A remote attacker can exploit this by sending a specially crafted TChannel call fragment that contains checksum metadata but lacks length-prefixed argument chunks. This can lead to a Go slice-bounds panic, causing the hosting process to...
CLEANSTART-2026-EI53048 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer
Security vulnerability affects the rclone package. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...
markdown-it Heap Buffer Overflow DoS
The vulnerability of the charCodeAt and slice functions in the markdown-it library is related to its inefficient algorithmic complexity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CVE-2026-56851
A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service DoS by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing th...
Linux Distros Unpatched Vulnerability : CVE-2026-102941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971,...
CVE-2026-102941
The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...
EUVD-2026-102934
The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...
CVE-2026-102941
The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...
Astra Linux – Vulnerability in libde265
It was discovered that Libde265 v1.0.11 contains a segmentation violation through the function decodercontext::processSliceSegmentHeader in decctx.cc...
Astra Linux – Vulnerability in libde265
There is an incorrect access control vulnerability in libde265 v1.0.8 due to a SEGV in slice.cc...
CLEANSTART-2026-AF18367 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer
CVE-2026-56851 affects multiple packages. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. See references for individual vulnerability details...
CLEANSTART-2026-YV55708 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer
Security vulnerability affects the wave package. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...
CLEANSTART-2026-KA88072 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer
CVE-2026-56851 affects multiple packages. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. See references for individual vulnerability details...
CLEANSTART-2026-MR26422 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer
CVE-2026-56851 affects multiple packages. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. See references for individual vulnerability details...