CVE-2022-48632
In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction
CVSS
7.8
Alto
EPSS
0.3%
p17
KEV
—
Exploit Today
5
0-100
Publicado: 28 abr 2024 · Última mod.: 4 ago 2026 · CWE-787
0.3%EPSS · 30 días0.3%
2026-08-012026-08-28
In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.
- git.kernel.orghttps://git.kernel.org/stable/c/3b5ab5fbe69ebbee5692c72b05071a43fc0655d8
- git.kernel.orghttps://git.kernel.org/stable/c/48ee0a864d1af02eea98fc825cc230d61517a71e
- git.kernel.orghttps://git.kernel.org/stable/c/dc2a0c587006f29b724069740c48654b9dcaebd2
- git.kernel.orghttps://git.kernel.org/stable/c/de24aceb07d426b6f1c59f33889d6a964770547b
- git.kernel.orghttps://git.kernel.org/stable/c/3b5ab5fbe69ebbee5692c72b05071a43fc0655d8
- git.kernel.orghttps://git.kernel.org/stable/c/48ee0a864d1af02eea98fc825cc230d61517a71e
- git.kernel.orghttps://git.kernel.org/stable/c/dc2a0c587006f29b724069740c48654b9dcaebd2
- git.kernel.orghttps://git.kernel.org/stable/c/de24aceb07d426b6f1c59f33889d6a964770547b
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-58106——
——0CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper.
At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size
passed down is the full PATH_MAX. safe_strcpy() is strncpy(), which NUL-pads the
destination out to the whole n, so this site writes 4096 bytes into the 4094 that remain — a
2-byte stack overflow on every invocation, independent of the input path's length.
This issue affects CodeChecker: through 6.28.2.1dCVE-2026-183935.4 MED—
——0A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond
the bounds of a heap-allocated buffer when processing crafted TDSC cursor
data. A remote attacker could exploit this by supplying a specially crafted
video file, potentially leading to a denial of service or arbitrary code
execution.1dCVE-2026-78011—24.5%
——7An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.1dCVE-2026-78010—25.1%
——8A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.1dCVE-2026-78008—23.1%
——7A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic.23hCVE-2026-19314—24.5%
——7An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.1d