483 matches found
CVE-2023-29377
An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects...
CVE-2023-29377
An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects...
CVE-2023-29377
Softing OPC UA C++ SDK (through 6.20) and Softing Secure Integration Server (through 1.22) are affected by a directory traversal vulnerability in the handling of OPC UA FileDirectory FileType renames . The root cause is a lack of proper validation of a user-supplied path before it is used in file...
EUVD-2023-60649
An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects...
CVE-2026-13148
Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...
CVE-2026-13148 Memory leak in scan method
Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...
CVE-2026-13148
CVE-2026-13148 is a memory leak in the scan method of Softing smartLink (HW-PN), where memory is not released after its effective lifetime. This allows a resource leak exposure. The affected versions are from 1.04 before 1.10 . The vulnerability is rated CVSS 4.0 6.3 (MEDIUM) , with a HIGH impact...
EUVD-2026-70986
Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...
CVE-2026-80706
A flaw was found in the softing module of the Linux kernel. This vulnerability exists within the fwparse function, which handles firmware records. It fails to properly validate the size of these records against the firmware data, leading to situations where the system can read or write data beyon...
SUSE CVE-2026-80706
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
CVE-2026-80706
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
AZL-98099 CVE-2026-80706 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
UBUNTU-CVE-2026-80706
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
CVE-2026-80706
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
CVE-2026-80706
CVE-2026-80706 affects the Linux kernel can: softing CAN bus driver. The vulnerable function is fw_parse() , which reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob , allowing a truncated record to cause out-of-bounds re...
CVE-2026-80706
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
CVE-2026-80706 can: softing: fw_parse(): validate firmware record spans
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
EUVD-2026-67441
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
CVE-2026-80706 can: softing: fw_parse(): validate firmware record spans
In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...
Linux Distros Unpatched Vulnerability : CVE-2026-80706
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing...