CVE-2024-26664
In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix out-of-bounds memory access Fix a bug that pdata
CVSS
7.8
High
EPSS
0.2%
p16
KEV
—
Exploit Today
5
0-100
Published: Apr 2, 2024 · Last modified: Aug 4, 2026 · CWE-787
0.2%EPSS · 30 days0.2%
2026-07-312026-08-28
In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix out-of-bounds memory access Fix a bug that pdata->cpu_map[] is set before out-of-bounds check. The problem might be triggered on systems with more than 128 cores per package.
- git.kernel.orghttps://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b
- git.kernel.orghttps://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1
- git.kernel.orghttps://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3
- git.kernel.orghttps://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d
- git.kernel.orghttps://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a
- git.kernel.orghttps://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb
- git.kernel.orghttps://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e
- git.kernel.orghttps://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd
- git.kernel.orghttps://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b
- git.kernel.orghttps://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1
- git.kernel.orghttps://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3
- git.kernel.orghttps://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d
- git.kernel.orghttps://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a
- git.kernel.orghttps://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb
- git.kernel.orghttps://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e
- git.kernel.orghttps://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-58106——
——0CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper.
At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size
passed down is the full PATH_MAX. safe_strcpy() is strncpy(), which NUL-pads the
destination out to the whole n, so this site writes 4096 bytes into the 4094 that remain — a
2-byte stack overflow on every invocation, independent of the input path's length.
This issue affects CodeChecker: through 6.28.2.18hCVE-2026-183935.4 MED—
——0A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond
the bounds of a heap-allocated buffer when processing crafted TDSC cursor
data. A remote attacker could exploit this by supplying a specially crafted
video file, potentially leading to a denial of service or arbitrary code
execution.18hCVE-2026-78011—24.5%
——7An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.18hCVE-2026-78010—25.1%
——8A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.18hCVE-2026-78008—23.1%
——7A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic.10hCVE-2026-19314—24.5%
——7An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.18h