Live threat intelligence radar

Fraunhofer HHI VVdeC versions up to 3.2.1 have a NULL pointer dereference vulnerability in the InterPrediction::xPredInterBlk function. This flaw can be triggered by a crafted VVC bitstream that switches the SPS to enable reference wrap-around, causing the decoder to read from missing buffers and crash. The vulnerability leads to denial of service by crashing the decoder.

Fraunhofer HHI VVdeC versions before 3.2.1 contain an out-of-bounds read vulnerability. This flaw allows attackers to crash the decoder by crafting bitstreams with overlapping slice CTU coverage, causing a negative reference index access during decoding. The issue is fixed in version 3.2.1.

Fraunhofer HHI VVdeC versions before 3.2.1 have a heap out-of-bounds read vulnerability in the SEIReader::xParseSEIScalableNesting function. This flaw allows attackers to read memory beyond allocated heap buffers by miscasting SEI wrapper objects. A crafted VVC bitstream with specific nested SEI messages can trigger this issue, potentially causing a crash or unauthorized memory disclosure.

Fraunhofer HHI VVdeC versions before 3.2.1 have a heap use-after-free vulnerability in the DecLibRecon::createSubPicRefBufs function. This occurs because decompressPicture clears m_subPicExtTasks without waiting for pending tasks, which can lead to heap memory corruption or a decoder crash when processing crafted multi-subpicture VVC bitstreams with two or more threads.

Fraunhofer HHI VVdeC versions before 3.2.1 contain a heap use-after-free vulnerability. This flaw arises when an ALF adaptation parameter set ID is redefined while still referenced by slices, leading to memory corruption. The vulnerability can be triggered by a crafted VVC bitstream during multithreaded decoding, causing worker threads to dereference freed APS objects. This results in crashes or heap corruption.

CVE-2026-123988 is a vulnerability in the SililaWijesinghe Food Ordering System that allows remote attackers to obtain sensitive information via directory listing in the /Food-Ordering-System/admin/ directory. The product does not use versioning, so affected versions cannot be precisely identified. The vendor was notified but did not respond or provide a fix. Public exploit details are available, but no known exploitation in the wild has been reported.

A use-after-free vulnerability was identified and fixed in the Linux kernel's net/sched sch_teql module. The flaw occurs when the teql_master_xmit() function incorrectly handles the return value of a slave's ndo_start_xmit(), leading to a use-after-free condition if the lower qdisc drops a packet. This issue affects Linux kernel version 2.6.33. The fix involves properly testing for packet consumption to avoid accessing freed memory.

This vulnerability in the Linux kernel involves the tun (network TUN/TAP) device driver. It fixes a security issue where attaching to a persistent tun device without an assigned owner or group did not require the CAP_NET_ADMIN capability, allowing unauthorized access. The fix enforces that attaching to such ownerless devices now requires CAP_NET_ADMIN, closing this loophole while preserving existing ownership and permission models.

A vulnerability in the Linux kernel's ksmbd component involves improper handling of session procfs readers during session cleanup. This flaw can lead to use-after-free conditions when session table references are dropped while procfs entries are still accessible. The issue is addressed by ensuring procfs entries are removed before dropping table references and properly draining procfs readers during connection cleanup.

A vulnerability in the Linux kernel's ksmbd component related to session management has been resolved. The issue involved ended sessions retaining memory and connection slots after logoff or expiration, potentially leading to resource retention. The fix ensures proper reclamation and cleanup of these sessions, including unlinking from connections and removing procfs entries to prevent stale session data. This addresses potential resource exhaustion or session management inconsistencies.