CVE-2020-10543
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer ove
CVSS
8.2
Alto
EPSS
11.3%
p96
KEV
—
Exploit Today
29
0-100
Publicado: 5 jun 2020 · Última mod.: 14 oct 2026 · CWE-190 · CWE-787
11.3%EPSS · 30 días11.3%
2026-09-282026-10-26
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html
- github.comhttps://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod
- github.comhttps://github.com/Perl/perl5/compare/v5.30.2...v5.30.3
- github.comhttps://github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
- security.gentoo.orghttps://security.gentoo.org/glsa/202006-03
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20200611-0001/
- www.oracle.comhttps://www.oracle.com//security-alerts/cpujul2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuApr2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2022.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2021.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html
- github.comhttps://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod
- github.comhttps://github.com/Perl/perl5/compare/v5.30.2...v5.30.3
- github.comhttps://github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
- security.gentoo.orghttps://security.gentoo.org/glsa/202006-03
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-865779.4 CRÍ—
——0Out-of-bounds Write Vulnerability in JP1 Products.
This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.4hCVE-2026-1168426.1 MED—
——0DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.13hCVE-2026-1168406.1 MED—
——0llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.13hCVE-2026-1168296.6 MED—
——0llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.13hCVE-2026-1167416.5 MED—
——0Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex data into buffers set up with speex_bits_init_buffer() or speex_bits_set_bit_buffer() to corrupt heap or stack memory and crash applications.16hCVE-2026-1167343.7 BAJ—
——0flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the buffer and crashing the process.16h