3315 matches found
CVE-2026-9805
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...
Unchecked Return Value
Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Unchecked Return Value in the canonicalize process. An attacker can bypass signature validation by supplying invalid canonicalized XML that is incorrectly accepted as valid...
UBUNTU-CVE-2026-79772
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...
CVE-2026-13217 NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi
The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...
CVE-2026-13217
The Zephyr RTOS OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c contains a NULL-pointer dereference in ocpp_process_server_msg(). When parsing the uid field of a CALLRESULT message, atoi(strtok_r(uid, "-", &tmp)) is called without checking whether strtok_r() returned NULL. A malicious or compromise...
CVE-2026-79772 Nokogiri before 1.19.1 Unchecked Return Value canonicalize
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...
CVE-2026-79772 Nokogiri before 1.19.1 Unchecked Return Value canonicalize
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...
CVE-2026-79772 Nokogiri before 1.19.1 Unchecked Return Value canonicalize
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...
CVE-2026-79772
Nokogiri versions before 1.19.1 (a widely used Ruby XML library) contain an unchecked return value in the canonicalize method. The method calls xmlC14NExecute but fails to check its return value, returning an empty string on failure instead of raising an exception. This allows an attacker to bypa...
CVE-2026-59646
A flaw was found in Bouncy Castle for Java. The DTLS Datagram Transport Layer Security handshake reassembler allocates buffers based on an unchecked 24-bit length value. A remote attacker could exploit this vulnerability by sending a specially crafted DTLS handshake message, leading to excessive...
ROS-20260825-73-0017
The vulnerability of the liotargetnaclinfoshow function in the drivers/target/iscsi/iscsitargetconfigfs.c file of the Linux kernel’s TCM driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...
The vulnerability of the find_sdca_entity_iot() function in the sound/soc/sdca/sdca_functions.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.
The vulnerability of the findsdcaentityiot function in the sound/soc/sdca/sdcafunctions.c module of the Linux kernel’s audio subsystem is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the amdxdna_cmd_get_payload() function in the drivers/accel/amdxdna/amdxdna_ctx.c driver for Linux kernel-based computing devices allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the amdxdnacmdgetpayload function in the drivers/accel/amdxdna/amdxdnactx.c driver for Linux computing devices relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker...
CVE-2026-79772: Unchecked Return Value
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...
CVE-2026-74717
A flaw was found in the Linux kernel's net/mlx5 component. This vulnerability occurs because the firmware tracer fwtracer does not properly handle error return values, specifically when ERRPTR is returned instead of NULL. An attacker could potentially trigger a kernel panic by exploiting this...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Device offsets in the MUX downlink decoder were incorrectly handled. The muxdladbdecode function iterates through a chain of aggregated datagram tables, using offsets and lengths provided by the modem. Values suc...
.NET: .NET Denial of Service Vulnerability
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
.NET: .NET Denial of Service Vulnerability
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...