Skip to content
Threat Feed
Subscribe

Tag

Out-of-Bounds

3 briefs RSS
medium threat

Potential Out-of-Bounds Write in rust-openssl AES-KW-PAD Cipher Operations

A potential out-of-bounds write vulnerability, CVE-2026-45784, has been identified in the `rust-openssl` library's `CipherCtxRef::cipher_update_inplace` function when processing AES-KW-PAD ciphers, which could lead to unexpected behavior or potential exploitation by corrupting memory.

exploited rust-openssl vulnerability library out-of-bounds
1c
high advisory

EVerest Out-of-Bounds Access Vulnerability (CVE-2026-26008)

EVerest, an EV charging software stack, has an out-of-bounds access vulnerability in versions prior to 2026.02.0, which can lead to remote crash or memory corruption when the CSMS sends UpdateAllowedEnergyTransferModes over the network.

cve ev-charging out-of-bounds denial-of-service
2r 2t
high advisory

OpenEXR PIZ Decoder Integer Overflow Leads to OOB Read/Write

A crafted OpenEXR file can trigger out-of-bounds memory access during PIZ decompression due to a signed 32-bit overflow in the `internal_exr_undo_piz()` function, leading to out-of-bounds reads and writes and potentially causing process crashes or memory corruption; affects OpenEXR versions 3.1.0 to 3.2.6, 3.3.0 to 3.3.8, and 3.4.0 to 3.4.8.

OpenEXR memory-corruption out-of-bounds cve-2026-34588
3r 4t 1i