100870 matches found
CVE-2026-95108
A resource leak exists in ThreadX within the Module Manager component. When a user-mode module thread is deleted via the _txm_module_manager_tx_thread_delete_dispatch function, the dispatcher only releases the TX_THREAD control block but fails to release the associated privileged kernel stack all...
CVE-2026-95108 Deleting a user-mode module thread leaks its privileged kernel stack
One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a TXTHREAD control block through txmmoduleobjectallocate; txmmodulemanagerthreadcreate then takes a second allocation of TXMMODULEKERNELSTACKSIZE bytes for...
CLSA-2026-1792508765 bluez: Fix of 5 CVEs
CVE-2026-19774: fix stack-based buffer overflow in A2DP remote stream endpoint codec capability storage and validate cached capabilities on load - CVE-2026-75032: fix out-of-bounds read in AVRCP GetFolderItems response parsing by bounding media item and folder names to the received packet length...
php: Fix of 13 CVEs
CVE-2026-7260: fix stack exhaustion via unbounded recursion on circular symlinks in phar archives - CVE-2026-9672: fix use of uninitialised LZW table data in bundled libgd GIF decoder...
CLSA-2026-1787229717 php: Fix of 13 CVEs
CVE-2026-7260: fix stack exhaustion via unbounded recursion on circular symlinks in phar archives - CVE-2026-9672: fix use of uninitialised LZW table data in bundled libgd GIF decoder...
CLSA-2026-1791337488 php: Fix of 10 CVEs
CVE-2025-14181: fix heap buffer overflow in the SOAP HTTP client chunked response handling GHSA-cj93-vc83-wgqv - CVE-2026-92842: fix heap over-read in convert stream filters with NUL in line-break-chars GHSA-88hq-2827-7pg6 - CVE-2026-93682: fix out-of-bounds read on an empty Location header in...
CVE-2026-93119
A flaw was found in the kernel. Specifically, within the USB LJCA driver's ljcaenumerategpio function, an attacker with a specially crafted malicious LJCA device could provide an unbounded banknum value. This improper handling of input leads to a stack overflow, which could result in a denial of...
CVE-2026-92520
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When BPF queue and stack pop/peek helpers fail to acquire a lock, they can return without properly initializing the output buffer. This allows a local attacker, by running a specially crafted BPF program, to observe...
CVE-2026-92518
A flaw was found in the Linux kernel's RISC-V BPF JIT compiler. When Control-Flow Integrity CFI with Clang is enabled, an error in calculating the tail call jump offset can lead to kernel stack corruption. This issue causes the system to improperly adjust the stack pointer, which can result in...
CVE-2026-90416
A flaw was found in the Linux kernel's RDMA/mlx5 component. The getparam function, used for debugging congestion parameters, incorrectly formats a 32-bit unsigned integer as a signed integer. This can lead to a stack out-of-bounds read when a large value is processed, potentially causing unexpect...
SUSE-SU-2026:4754-1 Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1703: files may be extracted outside the installation...
CVE-2026-43856
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...
EUVD-2026-104860
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43846
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution...
CVE-2026-43838
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution...
EUVD-2026-104857
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...
CVE-2026-43856
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...
CVE-2026-43856
A stack-based buffer overflow vulnerability exists in the FileProcess::CheckDir function. This flaw could allow a remote authenticated attacker to achieve arbitrary code execution by providing a path longer than 1024 bytes . No specific software vendor or version is explicitly identified in the p...