PT-2026-93204

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd write pre-flash validation routine triggered by short firmware uploads. Attackers can upload a truncated firmware image via put file cgi.c to trigger out-of-bounds reads across main.c, check image uuid.c, a...

Linux Distros Unpatched Vulnerability : CVE-2026-80933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A...

CVE-2026-80759 Bluetooth: hci_aml: validate firmware segment lengths

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciaml: validate firmware segment lengths amldownloadfirmware reads two lengths from the firmware header and uses them to build pointers before checking that the header and segment data are present. A truncated or...

EUVD-2026-67441

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...