982 matches found
firmware-mod-kit
Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. Extract a firmware image into its component parts User makes desired modification to the...
CVE-2026-79551-Tenda
CVE-2026-79551 Tenda Hardcoded TLS Private Key CNVD ID: CNVD-2026-25884 Vendor: Tenda Technology Co., Ltd. Product: NVR4H network video recorder hardware version CH3V2.1 Firmware: V27.5.58.6 Class: CWE-321 — Use of Hard-coded Cryptographic Key Overview The NVR4H firmware stores an ECDSA key pair ...
CVE-2025-47827
CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...
CVE-2026-98636
A flaw was found in the SquashFS file system implementation in the Linux kernel. A local user could exploit this vulnerability by mounting a specially crafted SquashFS image with an invalid dictionary size. Processing this image triggers an invalid shift operation, leading to a kernel crash and...
Linux Distros Unpatched Vulnerability : CVE-2026-98636
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted,...
Siemens SIMATIC S7-1500 TM MFP Improper Validation of Specified Index, Position, or Offset in Input (CVE-2026-23388)
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a 'general protection fault in squashfscopydata' This is ultimately caused by a corrupted index look-up table, which produces a negative metadata block offse...
UBUNTU-CVE-2026-98636
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
CVE-2026-98636
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
DEBIAN-CVE-2026-98636
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
CVE-2026-98636
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
CVE-2026-98636 squashfs: Add dictionary size range check to prevent shift-out-of-bounds
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
CVE-2026-98636 squashfs: Add dictionary size range check to prevent shift-out-of-bounds
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
EUVD-2026-103550
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
CVE-2026-98636
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
CVE-2026-98636
The Linux kernel contains a vulnerability in the squashfs module where mounting an abnormal SquashFS image (with COMP_OPTS set to 1 but a dictionary size of 0) triggers a shift-out-of-bounds error. This occurs because the shift exponent $n$ becomes -1, leading to an invalid shift operation during...
CVE-2026-98636: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image COMPOPTS flag is 1 but dictionary size is 0 is mounted, and performs shift operations using dictionarysize, the shift expone...
Linux Distros Unpatched Vulnerability : CVE-2026-104086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler SquashfsHandler.cpp that allows attackers to lea...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: Squashfs: fixed the handling and sanity checking of the xattrids count A Sysbot 1 corrupted the filesystem exposed two flaws in the handling and sanity checking of the xattrids count in the filesystem. Both of these flaws caus...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: Squashfs: Check that the inode number is not the invalid value of zero. Syskiller has identified an out-of-bounds access in the fillmetaindex function. This out-of-bounds access occurs because the inode has an inode number of...
Astra Linux – Vulnerability in squashfs-tools
In Squashfs-Tools 4.5, the squashfsopendir variable in unsquash-1.c stores the filename within the directory entry. This filename is then used by unsquashfs to create the new file during the unsquash process. The filename is not validated for traversal outside of the destination directory, allowi...