Skip to content
Threat Feed

Tag

Out-of-Bounds Write

20 briefs RSS
high advisory

CVE-2025-59605: Qualcomm Device Identifier String Memory Corruption

CVE-2025-59605 is a memory corruption vulnerability in Qualcomm products where processing overly long device identifier strings leads to an out-of-bounds write, potentially allowing for information disclosure, code execution, or denial of service.

memory corruption out-of-bounds write cve-2025-59605 qualcomm
2r 2t 1c
high advisory

CVE-2026-42250 Off-by-One Leading to Out-of-Bounds Write in bzip2

CVE-2026-42250 is an off-by-one vulnerability leading to an out-of-bounds write in bzip2, for which Microsoft has released information.

cve-2026-42250 bzip2 out-of-bounds write memory corruption rce
2r 1t 1c
high advisory

CVE-2026-7451 - Autodesk 3ds Max Out-of-Bounds Write Vulnerability via Malicious TIF File

CVE-2026-7451 is an out-of-bounds write vulnerability in Autodesk 3ds Max that can be exploited via a maliciously crafted TIF file, potentially leading to a crash, data corruption, or arbitrary code execution.

3ds Max cve out-of-bounds write tif memory corruption
2r 1t 1c
high advisory

CVE-2026-34682: Adobe Substance3D Designer Out-of-Bounds Write Vulnerability

Adobe Substance3D Designer versions 15.1.0 and earlier are susceptible to an out-of-bounds write vulnerability (CVE-2026-34682) that can lead to arbitrary code execution if a user opens a specially crafted malicious file.

Substance3D Designer cve adobe out-of-bounds write code execution user interaction
2r 1t 1c
high advisory

CVE-2026-34681 - Adobe Substance3D Designer Out-of-Bounds Write Vulnerability

Adobe Substance3D Designer versions 15.1.0 and earlier are vulnerable to an out-of-bounds write, potentially leading to arbitrary code execution if a user opens a malicious file.

Substance3D Designer cve-2026-34681 out-of-bounds write code execution user interaction
2r 1t 1c
high advisory

CVE-2026-34676: Adobe Substance3D Painter Out-of-bounds Write Vulnerability

Adobe Substance3D Painter versions 12.0.2 and earlier are vulnerable to an out-of-bounds write, potentially leading to arbitrary code execution if a user opens a malicious file.

Substance3D - Painter cve adobe out-of-bounds write code execution cve-2026-34676
2r 1t 1c
high advisory

CVE-2026-34675: Adobe Substance3D Painter Out-of-Bounds Write Vulnerability

Adobe Substance3D Painter versions 12.0.2 and earlier are vulnerable to an out-of-bounds write vulnerability (CVE-2026-34675) that could lead to arbitrary code execution if a user opens a malicious file.

Painter cve out-of-bounds write code execution
2r 1t 1c
high advisory

CVE-2026-34661: Adobe Illustrator Out-of-Bounds Write Vulnerability

Adobe Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability (CVE-2026-34661) that could lead to arbitrary code execution when a user opens a malicious file.

Illustrator cve-2026-34661 out-of-bounds write code execution adobe illustrator
2r 1t 1c
high threat

CVE-2026-34643: Adobe After Effects Out-of-Bounds Write Vulnerability

Adobe After Effects versions 26.0, 25.6.4, and earlier are susceptible to an out-of-bounds write vulnerability, potentially leading to arbitrary code execution when a user opens a malicious file.

After Effects +1 cve-2026-34643 out-of-bounds write code execution adobe after effects
2r 1t 1c
high advisory

CVE-2026-34637: Adobe Premiere Pro Out-of-Bounds Write Vulnerability

Adobe Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability (CVE-2026-34637) that could lead to arbitrary code execution if a user opens a malicious file.

Premiere Pro cve-2026-34637 adobe out-of-bounds write rce
2r 1t 1c
high advisory

Adobe Premiere Pro Out-of-Bounds Write Vulnerability (CVE-2026-34636)

Adobe Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability (CVE-2026-34636) that could lead to arbitrary code execution when a user opens a malicious file.

Premiere Pro +1 cve adobe out-of-bounds write code execution
2r 1t 1c
critical threat

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Added to CISA KEV Catalog

CVE-2026-0300, a Palo Alto Networks PAN-OS out-of-bounds write vulnerability, has been added to CISA's Known Exploited Vulnerabilities Catalog due to evidence of active exploitation.

exploited PAN-OS cve-2026-0300 kev out-of-bounds write active exploitation
3r 1t
high advisory

Samsung Escargot Out-of-Bounds Write Vulnerability (CVE-2026-25207)

CVE-2026-25207 is an out-of-bounds write vulnerability in Samsung Open Source Escargot that allows for buffer overflows, potentially leading to arbitrary code execution.

cve-2026-25207 out-of-bounds write buffer overflow samsung escargot
2r 2t 1c
high advisory

Amazon Firecracker Virtio PCI Out-of-Bounds Write Vulnerability (CVE-2026-5747)

An out-of-bounds write vulnerability in Amazon Firecracker's virtio PCI transport (CVE-2026-5747) allows a local guest user with root privileges to potentially crash the VMM process or execute arbitrary code on the host.

cve-2026-5747 firecracker out-of-bounds write vmm virtio
3r 2t 1c
high advisory

NI LabVIEW LVLIB File Parsing Memory Corruption Vulnerability (CVE-2026-32860)

A memory corruption vulnerability exists in NI LabVIEW due to an out-of-bounds write when loading a corrupted LVLIB file, potentially leading to information disclosure or arbitrary code execution if a user opens a specially crafted .lvlib file.

cve-2026-32860 labview memory corruption out-of-bounds write lvlib
2r 2t 1c 1i
high advisory

NI LabVIEW LVCLASS File Parsing Out-of-Bounds Write Vulnerability (CVE-2026-32861)

A memory corruption vulnerability exists in NI LabVIEW due to an out-of-bounds write when loading a corrupted LVCLASS file (CVE-2026-32861), potentially leading to information disclosure or arbitrary code execution if a user opens a specially crafted .lvclass file.

cve-2026-32861 labview out-of-bounds write memory corruption
2r 4t 1c
high advisory

AWS-C-EventStream Out-of-Bounds Write Vulnerability (CVE-2026-5190)

CVE-2026-5190 is an out-of-bounds write vulnerability in the aws-c-event-stream library before version 0.6.0 that allows a malicious third-party server to cause memory corruption and potential arbitrary code execution on client applications.

cve-2026-5190 aws-c-event-stream out-of-bounds write code execution
2r 3t 1c
critical advisory

Android-ImageMagick7 Out-of-Bounds Write Vulnerability (CVE-2026-33854)

An unauthenticated, remote attacker can exploit an out-of-bounds write vulnerability (CVE-2026-33854) in MolotovCherry Android-ImageMagick7 versions before 7.1.2-10 by enticing a user to open a malicious image, potentially leading to arbitrary code execution.

cve out-of-bounds write android imagemagick
2r 1t
high advisory

Yokogawa CENTUM VP R6 and R7 Vulnerabilities Lead to Potential Denial of Service and Arbitrary Code Execution

Multiple vulnerabilities in Yokogawa CENTUM VP R6 and R7 Vnet/IP Interface Package can be exploited by sending maliciously crafted packets, leading to denial-of-service or arbitrary code execution.

ics denial-of-service out-of-bounds write
2r 3t
critical advisory

ksmbd Out-of-Bounds Write Vulnerability in QUERY_INFO (CVE-2026-31432)

CVE-2026-31432 is a critical out-of-bounds write vulnerability in ksmbd, specifically within the QUERY_INFO functionality when handling compound requests, potentially leading to code execution or denial of service.

ksmbd smb out-of-bounds write cve-2026-31432
2r 1c