Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 33

The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program headers, then iterated over the map a second time to populate them.

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00105 Published 2026-08-19 Fixed in p2, p12 +1 CWE-362
TI-2026-41837 CVE-2026-58087 · GHSA-v78v-rxq5-6w38

Heap out-of-bounds access in semctl(2)

Priority LOW 35

The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00165 Published 2026-08-19 Fixed in p2, p12 +1 CWE-125
Priority LOW 39

After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC verification step succeeded.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00323 Published 2026-08-19 Fixed in p2, p12 +1 CWE-347