Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition in the processing of malformed DWARF debugrnglists data. An attacker can cause a denial of service by providing specially crafted input files. Remediation Upgrade binutils to version 2.46.1 or higher...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition through the processing of crafted binaries containing malformed DWARF debug information. An attacker can cause the application to crash or become unresponsive by supplying specially crafted input files...

The vulnerability of the `netfs_unbuffered_write_iter_locked()` function in the `fs/netfs/direct_write.c` module, which is part of the Linux kernel’s network file system support, allows a hacker to cause a service failure.

The vulnerability of the netfsunbufferedwriteiterlocked function in the fs/netfs/directwrite.c module, which is part of the Linux kernel’s network file system support, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the `zynqmp_dma_alloc_chan_resources()` function in the `drivers/dma/xilinx/zynqmp_dma.c` file of the Linux kernel’s DMA driver module allows a attacker to cause a service failure.

The vulnerability of the zynqmpdmaallocchanResources function in the drivers/dma/xilinx/zynqmpdma.c driver module of the Linux kernel’s DMA driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the sja1105_setup_devlink_regions() function in the drivers/net/dsa/sja1105/sja1105_devlink.c file of the NXP SJA1105 series switch driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sja1105setupdevlinkregions function in the drivers/net/dsa/sja1105/sja1105devlink.c file of the NXP SJA1105 series switch driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attac...

The vulnerability of the fromAdvSetWan() function in the Tenda F453 router software allows a hacker to disrupt network services.

The vulnerability of the fromAdvSetWan function in the Tenda F453 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the memory_info_update() function in the sound/soc/sof/debug.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the memoryinfoupdate function in the sound/soc/sof/debug.c module related to the Linux operating system’s SoC audio support involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

EUVD-2025-208323

A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver version 1.2.0.0 in the IOCTL handler for code 0x80102058. The vulnerability is caused by missing bounds checking on the user-controlled Options parameter before copying data into a 40-byte stack buffer...

CVE-2025-70616

A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver version 1.2.0.0 in the IOCTL handler for code 0x80102058. The vulnerability is caused by missing bounds checking on the user-controlled Options parameter before copying data into a 40-byte stack buffer...

CVE-2025-59600

Memory Corruption when adding user-supplied data without checking available buffer space...

ROS-20260304-73-0022

A vulnerability in the keyextractl3l4 function of the net/openvswitch/flow.c module of the openvswitch component of the Linux operating systems kernel is related to unchecked array indexing. Exploitation of the vulnerability could allow an attacker to cause a denial of service by sending speciall...

The vulnerability of the vub300_probe() function in the drivers/mmc/host/vub300.c file of the MMC/SD/SDIO card driver module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vub300probe function in the drivers/mmc/host/vub300.c file of the MMC/SD/SDIO card driver in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-70252

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability...

CVE-2026-24105

An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18multi. The value of v1 was not checked, potentially leading to a command injection vulnerability if injected into doSystemCmd...

Pip Vulnerable to Path Traversal via Lack of Symbolic Link Validation in 'unpacking.py‎' File

Pip is vulnerable to path traversal due to a lack of validation for symbolic links when Pip is used with instances of python which do not implement PEP 706. This could allow a remote attacker to extract a tar file outside of the intended directory...

CVE-2026-24110

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Attackers may send overly long addDhcpRules data. When these rules enter the addDhcpRule function and are processed by ret = sscanfpRule, " %d\t%^\t\t%^\n\r\t", &dhcpsIndex, dhcpsIP, dhcpsMac;, the lack of size validation for the rules could...

PT-2026-22653

Name of the Vulnerable Software and Affected Versions Tenda AC15V1.0 versions prior to V15.03.05.18 multi Description An issue exists in the goform/formsetUsbUnload component of the software. The v1 variable is not properly validated, which could allow for command injection when used with the...

PT-2026-22595

Name of the Vulnerable Software and Affected Versions Tenda W20E version 4.0br V15.11.0.6 Description A buffer overflow issue exists in the getMibPrefix function of Tenda W20E routers. The issue occurs due to improper size validation when concatenating the value of the nptr parameter using sprint...

CVE-2026-24109

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Attackers may exploit the vulnerability by controlling the value of picName. When this value is used in sprintf without validating variable sizes, it could lead to a buffer overflow vulnerability...

EUVD-2025-208181

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability...