lwIP Developers: lwIP buffer error vulnerability

lwIP Developers: Versions of lwIP 2.2.1 and earlier contain a buffer overflow vulnerability. This vulnerability stems from the mdnshandleresponse function, which allows stack-based out-of-bounds writes. Attackers can exploit this vulnerability by sending mDNS responses with invalid domain names...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the fact that in the function cd321xupdatework, the variable typecpartnerdesc is not initialized to zero. Only the variables usbpd, accessory, and identity are initialized. As a result, fields such as...

Grigory Chudov’s buffer error vulnerability

Grigory Chudov’s libtta versions 2.3 and earlier have a buffer error vulnerability. This vulnerability arises from the lack of header checks that reject zero audio channels. An attacker can create a specially crafted .tta file that declares zero audio channels, causing the application to access...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...

AbiWord wv buffer error vulnerability

AbiWord versions 1.2.9 and earlier have a buffer error vulnerability. This vulnerability stems from the lack of verification of the FKP run count in functions wvGetPAPXFKP and wvGetCHPXFKP. Attackers can read content that exceeds the 512-byte stack buffer by providing a specially crafted.doc file...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from insufficient depth restrictions on the ownership relationship between BPF and local kptrs and Goto statements. The self-referencing local kptr types can form arbitrarily deep object chains, and the sa...

Grigory Chudov: A bug related to numerical errors

Grigory Chudov’s libtta versions 2.3 and earlier have a numerical error vulnerability. This vulnerability stems from the ttadecoderinitgetinfo function not verifying header fields properly. Integer overflow leads to a stack buffer overflow in 32-bit builds. Attackers can exploit this vulnerabilit...

SUSE CVE-2026-93164

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Move optimized uprobe from nop5 to nop10 Andrii reported an issue with optimized uprobes 1 that can clobber redzone area with call instruction storing return address on stack where user code may keep temporary data...

Exploit for CVE-2026-99999

cve-2026-99999-audit !CVEhttps://img.shields.io/badge/CVE-...

MGASA-2026-0515 Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

MGASA-2026-0518 Updated nodejs-braces package fixes a security vulnerability

It was discovered that braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards CVE-2026-93687...

Updated nodejs-braces package fixes a security vulnerability

It was discovered that braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards CVE-2026-93687...

Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

Linux Distros Unpatched Vulnerability : CVE-2026-110606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreCAD libdxfrw through LC2.2.0 LibreCAD through 2.2.1.5 contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader caused by...

Linux Distros Unpatched Vulnerability : CVE-2026-111275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nifticlib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifticonvertn2hdr2nim because the NIfTI-2 dim0 value is never...

Linux Distros Unpatched Vulnerability : CVE-2026-110661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFIreadnodeheader that allows attackers to crash applications by supplying crafted ADF...

Linux Distros Unpatched Vulnerability : CVE-2026-110604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML...

Linux Distros Unpatched Vulnerability : CVE-2026-111678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets ar...

Linux Distros Unpatched Vulnerability : CVE-2026-100354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an...

SUSE CVE-2026-92391

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...