Browse CVEs

HIGH 7.8 CVE-2026-0536 A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can le… 3ds Max 2026.3.2+ Fix from $1,9502026-02-04 HIGH 7.8 CVE-2026-23092 In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source Wh… Linux Kernel 6.18.8+ Fix from $1,9502026-02-04 HIGH 7.8 CVE-2026-23073 In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory corruption due to not set vif driver data size The struct… Linux Kernel 5.10.249 / 5.15.199+ Fix from $1,9502026-02-04 HIGH 7.8 CVE-2026-23078 In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Fix buffer overflow in config retrieval The scarlett2_usb_get_… Linux Kernel 5.15.199 / 6.1.162+ Fix from $1,9502026-02-04 HIGH 8.4 CVE-2026-0537 A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage thi… 3ds Max 2026.3.2+ Fix from $1,9502026-02-04 HIGH 8.4 CVE-2026-0538 A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage … 3ds Max 2026.3.2+ Fix from $1,9502026-02-04 HIGH 7.8 CVE-2026-0659 A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A m… Mitigation only Fix from $1,9502026-02-04 HIGH 8.4 CVE-2026-0661 A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage thi… 3ds Max 2026.3.2+ Fix from $1,9502026-02-04 HIGH 8.8 CVE-2026-1861 Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 144.0.7559.132+ Fix from $1,9502026-02-03 HIGH 7.5 CVE-2025-62601 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.… Fast Dds 2.6.11 / 3.3.1+ Fix from $1,9502026-02-03 HIGH 7.5 CVE-2025-62602 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.… Debian Linux 2.6.11 / 3.3.1+ Fix from $1,9502026-02-03 CRITICAL 9.8 CVE-2025-62799 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.… Debian Linux 2.6.11 / 3.3.1+ Fix from $2,3002026-02-03 HIGH 7.8 CVE-2026-25502 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.2+ Fix from $1,9502026-02-03 MEDIUM 6.6 CVE-2026-1788 : Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet processing module modules) all… Mitigation only Fix from $1,6002026-02-03 HIGH 7.8 CVE-2026-20412 In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious … Android Mitigation only Fix from $1,9502026-02-02 MEDIUM 6.7 CVE-2026-20413 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious act… Android Mitigation only Fix from $1,6002026-02-02 MEDIUM 5.3 CVE-2026-20417 In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor… Android Mitigation only Fix from $1,6002026-02-02 CRITICAL 9.8 CVE-2026-20418 In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additiona… Matter after 1.4 Fix from $2,3002026-02-02 MEDIUM 6.5 CVE-2026-20404 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a … Nr15 Mitigation only Fix from $1,6002026-02-02 CRITICAL 9.3 CVE-2026-20407 In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with … Nbiot Sdk after 3.8 Fix from $2,3002026-02-02 HIGH 8.8 CVE-2026-20408 In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege… Software Development Kit after 7.6.7.2 Fix from $1,9502026-02-02 HIGH 7.8 CVE-2026-20409 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious act… Android Mitigation only Fix from $1,9502026-02-02 MEDIUM 6.7 CVE-2026-20410 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious act… Android Mitigation only Fix from $1,6002026-02-02 MEDIUM 6.5 CVE-2026-20402 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a … Nr15 Mitigation only Fix from $1,6002026-02-02 MEDIUM 6.5 CVE-2026-20403 In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rog… Nr15 Mitigation only Fix from $1,6002026-02-02 HIGH 8.4 CVE-2020-37031 Simple Startup Manager 1.17 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory thro… No fix yet Fix from $1,9502026-01-30 HIGH 7.5 CVE-2026-25061 tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a lengt… Debian Linux after 1.6.1 Fix from $1,9502026-01-29 HIGH 7.5 CVE-2020-37011 Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TT… No fix yet Fix from $1,9502026-01-29 CRITICAL 9.8 CVE-2026-24857 `bulk_extractor` is a digital forensics exploitation tool. Starting in version 1.4, `bulk_extractor`’s embedded unrar code has a heap‑buffer‑overflow… Bulk Extractor Mitigation only Fix from $2,3002026-01-28 MEDIUM 6.5 CVE-2025-71004 A segmentation violation in the oneflow.logical_or component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted inpu… Oneflow No fix yet Fix from $1,6002026-01-28