Browse CVEs

HIGH 7.5 CVE-2026-28842 The issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and u… macOS 26.4+ Fix from $1,9502026-03-25 HIGH 8.2 CVE-2026-27654EPSS 22% NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to trigger a buffer overflow to … Nginx Plus 1.28.3 / 1.29.7+ Fix from $1,9502026-03-24 HIGH 8.8 CVE-2026-4675 Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafte… Chrome 146.0.7680.164+ Fix from $1,9502026-03-24 HIGH 8.8 CVE-2026-4673 Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a cr… Chrome 146.0.7680.164+ Fix from $1,9502026-03-24 HIGH 7.8 CVE-2026-33298 llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the `ggml_nbytes` function allows an a… Llama.cpp No fix yet Fix from $1,9502026-03-24 HIGH 7.5 CVE-2026-33164 libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fau… Libde265 1.0.17+ Fix from $1,9502026-03-20 CRITICAL 9.9 CVE-2026-32710 MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11… MariaDB 11.4.10 / 11.8.6+ Fix from $2,3002026-03-20 CRITICAL 9.8 CVE-2026-32945 PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability… Pjsip 2.17+ Fix from $2,3002026-03-20 HIGH 8.8 CVE-2026-4463 Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 146.0.7680.153+ Fix from $1,9502026-03-20 HIGH 8.8 CVE-2026-4455 Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 146.0.7680.153+ Fix from $1,9502026-03-20 HIGH 8.8 CVE-2026-4448 Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 146.0.7680.153+ Fix from $1,9502026-03-20 HIGH 8.8 CVE-2026-4442 Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 146.0.7680.153+ Fix from $1,9502026-03-20 HIGH 8.8 CVE-2026-4443 Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a … Chrome 146.0.7680.153+ Fix from $1,9502026-03-20 CRITICAL 9.8 CVE-2026-4395 Heap-based buffer overflow in the KCAPI ECC code path of wc_ecc_import_x963_ex() in wolfSSL wolfcrypt allows a remote attacker to write attacker-cont… Wolfssl 5.9.0+ Fix from $2,3002026-03-19 MEDIUM 5.5 CVE-2026-3229 An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written … Wolfssl 5.9.0+ Fix from $1,6002026-03-19 CRITICAL 9.8 CVE-2026-3549 Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in… Wolfssl 5.9.0+ Fix from $2,3002026-03-19 HIGH 8.1 CVE-2026-2646 A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL_d2i_SSL_SESSION() function. When deserializing session data with SESSION_CERTS enabl… Wolfssl 5.9.0+ Fix from $1,9502026-03-19 CRITICAL 9.8 CVE-2026-3548 Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when imprope… Wolfssl 5.9.0+ Fix from $2,3002026-03-19 CRITICAL 9.8 CVE-2006-10003 XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the s… Xml\ 2.48+ Fix from $2,3002026-03-19 HIGH 7.5 CVE-2006-10002 XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crash… Xml\ 2.48+ Fix from $1,9502026-03-19 HIGH 8.1 CVE-2026-31971 HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a… Htslib 1.21.1 / 1.22.2+ Fix from $1,9502026-03-18 HIGH 8.1 CVE-2026-31968 HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a… Htslib 1.21.1 / 1.22.2+ Fix from $1,9502026-03-18 HIGH 8.1 CVE-2026-31969 HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a… Htslib 1.21.1 / 1.22.2+ Fix from $1,9502026-03-18 HIGH 8.1 CVE-2026-31970 HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP [BGZF] files. In the GZI … Htslib 1.21 / 1.22.2+ Fix from $1,9502026-03-18 HIGH 8.1 CVE-2026-31963 HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one… Htslib 1.21.1 / 1.22.2+ Fix from $1,9502026-03-18 HIGH 8.8 CVE-2026-31962 HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While … Htslib 1.21.1 / 1.22.2+ Fix from $1,9502026-03-18 CRITICAL 9.1 CVE-2026-4177 YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML e… Yaml\ 1.37+ Fix from $2,3002026-03-16 HIGH 8.8 CVE-2026-3560 Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-… Hue Bridge V2 Firmware 1975170000+ Fix from $1,9502026-03-16 HIGH 8.0 CVE-2026-3561 Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent … Hue Bridge V2 Firmware 1975170000+ Fix from $1,9502026-03-16 HIGH 8.0 CVE-2026-3555 Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows netw… Hue Bridge V2 Firmware 1975170000+ Fix from $1,9502026-03-16