104997 matches found
CVE-2026-98189
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilcwlanhandleisrext wilcwlanhandleisrext takes the RX transfer size from the device-reported interrupt status register a 15-bit field shifted left by 2, up to 131068 bytes and reads tha...
CVE-2026-98181
The Linux kernel contains an out-of-bounds write vulnerability in the drm/gud component within the gud_plane_atomic_check() function. The issue is caused by a logic error where the num_properties variable is incremented inside a loop while also being used in an index calculation as num_properties...
CVE-2026-98181 drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...
CVE-2026-98181 drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...
EUVD-2026-93109
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...
CVE-2026-98181
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...
CVE-2026-104983
A flaw was found in Xreader. A remote attacker could provide a crafted document containing a malicious attachment filename that bypasses directory restrictions. If a user attempts to save the attachment, arbitrary files may be written or overwritten outside the intended target directory,...
CVE-2026-25273
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
CVE-2026-25273 Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
CVE-2026-25273
The Camera Driver is vulnerable to Memory Corruption caused by an out-of-bounds write during driver updates when processing camera operations. This issue is categorized under CWE-787 . The CVSS 3.1 score is 6.7 (MEDIUM) , with a local attack vector and high privileges required. Exploitation detai...
EUVD-2026-92975
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
CVE-2026-25273 Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
CVE-2026-25272 Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...
CVE-2026-25272
A Memory Corruption vulnerability exists in the camera CRE driver due to improper handling of buffer limits during hardware update preparation. This Out-of-bounds Write (CWE-787) allows for potential high impact on confidentiality, integrity, and availability. The vulnerability requires high priv...
CVE-2026-25272 Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...
CVE-2026-25270 Out-of-bounds Write in Camera Driver
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...
CVE-2026-25270
The Android Camera driver is vulnerable to a memory corruption issue caused by an out-of-bounds write . This occurs when the driver processes command buffer requests that contain invalid length parameters . While the specific affected versions are not provided in the documents, the vulnerability ...
CVE-2026-25270 Out-of-bounds Write in Camera Driver
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...
CVE-2026-25269 Out-of-bounds Write in Camera Driver
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size...
CVE-2026-25269
A memory corruption vulnerability exists in the Camera Driver due to an out-of-bounds write (CWE-787). The issue occurs when the driver processes camera requests with excessive batch and IO buffer configurations that exceed the allocated memory size. This vulnerability results in high impact acro...