CVE-2026-76788: Out-of-bounds Write

The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...

PT-2026-117419

Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr load image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md...

CVE-2026-112275: Out-of-bounds Write

Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder prloadimage in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past mdimage...

PT-2026-117543

TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...

ROS-20261019-73-0007

The vulnerability of the applysaointernal function sao.cc in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-117577

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions 4.20 through 4.79 Description A write out of bounds occurs during canonical encoding in the encode hv function when a tied or shared hash grows. The encoder utilizes a fixed 64-entry stack array or a heap array sized...

Linux Distros Unpatched Vulnerability : CVE-2026-112007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmtultloadsong in fmt/ult.c that fails to clamp the one-byte sample count t...

Linux Distros Unpatched Vulnerability : CVE-2026-112275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder prloadimage in...

Linux kernel IPv4 skb_checksum_help Buffer Overflow DoS

The vulnerability in the skbchecksumhelp function of the IPv4 implementation within the Linux kernel system is related to out-of-bounds memory writes. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-96233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-96233 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2026-112062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdnshandleresponse that allows adjacent attackers to corrupt stack memory by sending mD...

CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.4:CLSA-2026:1792411866)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792411866 advisory. - rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one...

Teable 1.10.0 Attachment Write Path Traversal

Teable versions 1.10.0 and earlier contain an attachment signature path traversal vulnerability that allows an authenticated user to write or overwrite files outside the local storage directory with backend-process privileges. https://packetstorm.news/download/236363...

RHEL 10 : mariadb11.8 (RHSA-2026:84799)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84799 advisory. MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation...

openSUSE 16 Security Update : mutt (openSUSE-SU-2026:22099-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22099-1 advisory. This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in convertfilefromto via a crafted Content-Type header...

Linux Distros Unpatched Vulnerability : CVE-2026-112060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3Decode ignores AMF3 property decode...

MiracleLinux 8 : pcre2-10.32-4.el8_10 (AXSA:2026-2088:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2088:03 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 pcre2: PCRE2: Out-of-bounds write v...

ALSA-2026:84799 Important: mariadb11.8 security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

Linux Distros Unpatched Vulnerability : CVE-2026-98532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: do not let ipv6findhdr return an offset past the packet end ipv6findhdr walks the extension header chain, skipping each header by the length that header...

MiracleLinux 9 : ghostscript-9.54.0-19.el9_8.3 (AXSA:2026-2092:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2092:04 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...