NVIDIA PhysX contains a high-severity out-of-bounds write vulnerability that could allow an attacker to execute code, tamper with data, cause denial of service, or disclose information. The vulnerability affects all platforms where PhysX is used. No specific affected versions or patches are currently detailed.
CVE-2026-86577 is a critical out-of-bounds write vulnerability affecting multiple Hitachi JP1 products, including JP1/Integrated Management 3 - Manager and JP1/Automatic Job Management System 3 components. The flaw exists in versions from 13-00 up to but not including 13-50-31 for Integrated Management and Automatic Job Management System, and from 11-00 up to but not including 12-50-54 for JP1/Base. This vulnerability could allow an unauthenticated attacker to execute arbitrary code or cause a denial of service. A fix is available in versions 13-50-31 and 12-50-54.
CVE-2026-116590 is a vulnerability in xerial's snappy-java prior to version 1.1.10.9. It involves improper validation of array indices in the Snappy.arrayCopy method, which allows out-of-bounds reads or writes due to unchecked negative or oversized offset and byteLength values. This can cause JVM crashes. The issue affects methods that pass caller-controlled ranges to native memcpy, including SnappyOutputStream.rawWrite and SnappyInputStream.rawRead. The vulnerability is fixed in version 1.1.10.9.
CVE-2026-82947 is a high-severity vulnerability in RT-Labs AB SOEM affecting versions before 2.0.1. It involves out-of-bounds reads caused by improper validation of length and offset values in device messages during frame processing. This flaw can lead to the master reading memory outside allocated buffers, potentially exposing sensitive information or causing application crashes. The issue is fixed in version 2.0.1.
SOEM versions before 2.0.1 have an out-of-bounds write vulnerability during device configuration. The software writes configuration data to a fixed-size array without verifying the index against the maximum allowed size (EC_MAXFMMU). A malicious device presenting more configuration blocks than EC_MAXFMMU can cause memory corruption by writing beyond the array boundary, potentially disrupting subsequent operations.
CVE-2026-82944 is a high-severity out-of-bounds write vulnerability in RT-Labs AB's SOEM software versions 2.0.0 and earlier. It arises from improper handling of multi-segment data transfers, where the total size is only checked once initially, allowing a malicious device to overflow memory buffers by sending additional segments beyond the declared size. This flaw can enable an attacker to write controlled data beyond buffer boundaries, potentially leading to code execution. The issue is fixed in version 2.0.1.
CVE-2026-70388 is an integer underflow vulnerability in RT-Labs AB SOEM versions prior to 2.0.1. A malicious network device can send crafted messages that cause the master to write outside allocated memory boundaries by exploiting improper validation of message length arithmetic. This memory corruption may lead to arbitrary code execution on the master system. The issue is fixed in version 2.0.1.
A classic buffer overflow vulnerability (CWE-120) exists in TianoCore EDK2 BIOS that allows remote attackers to cause out-of-bounds writes and incorrect buffer size calculations. Exploiting this flaw can lead to arbitrary code execution and impact confidentiality, integrity, and availability of the system. The vulnerability is critical with a CVSS 4.0 score of 9.5.
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
An out-of-bounds read and write vulnerability exists in Apache DataSketches C++ Count-Min sketch deserialization versions 4.1.0 through 5.2.0. The flaw allows reading beyond the input buffer and integer overflow during table size calculation, leading to heap memory corruption. This can cause application crashes and potentially enable further exploitation. The issue affects only applications deserializing Count-Min sketches from untrusted sources. Upgrading to version 5.3.0 resolves the vulnerability.
A critical out-of-bounds read and write vulnerability affects the Pillow Python imaging library versions 11.0.0 up to but not including 13.0.0. The flaw arises from multi-frame image loaders reusing stale native storage without verifying mode and size consistency, leading to memory corruption. Crafted image frames in PSD, MPO, DCX, or MIC formats can trigger crashes and, in some cases, command execution. This vulnerability is fixed in Pillow version 13.0.0.
A heap out-of-bounds write vulnerability exists in the Pillow Python imaging library versions 9.4.0 through 12.x, fixed in 13.0.0. The flaw occurs in the JPEG encoding process when handling ICC profiles that exactly fill the 65536-byte encoder buffer, allowing an attacker-controlled comment and image data to overwrite adjacent heap memory. This can cause a crash or potentially enable code execution under certain runtime and heap conditions.
CVE-2026-56388 is a critical out-of-bounds write vulnerability in Apache bRPC's Redis server command parser. It occurs when the parser accepts an empty RESP array as a command header, allowing a remote unauthenticated attacker to cause a crash by sending a malformed command. The issue affects deployments with Redis service enabled that accept untrusted Redis protocol traffic. The vulnerability is fixed in Apache bRPC version 1.18.0.
CVE-2026-109576 is an out-of-bounds write vulnerability in the PEAK-System Device Driver Setup by HMS Networks. The issue arises because the loop iterating over a record list incorrectly advances its processed-bytes counter even when a malformed record is rejected, potentially leading to memory corruption. This vulnerability has a CVSS score of 5.5, indicating a medium severity level, with impact primarily on availability. The affected versions include all releases up to and including 5.1.2.1151. No public exploits or patches are currently documented.
Adobe Acrobat for Edge contains an out-of-bounds write vulnerability that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 154.0.4258.37. No official patch information is provided in the available data.
CVE-2026-95107 is an integer overflow vulnerability in the Eclipse Foundation's Eclipse ThreadX module manager. The vulnerability occurs when the module manager adds a 16-byte private header to an object size without checking for overflow, causing the size to wrap around. This results in the allocation of a smaller memory block than required, leading to a buffer overflow where the header is written past the allocated block into adjacent memory.
CVE-2026-95109 is a high-severity out-of-bounds read vulnerability in Eclipse Foundation's Eclipse ThreadX affecting versions 6.1 through 6.5.1.202602a. The flaw arises from improper validation of buffer ranges in the Cortex-A7 MMU Modules port, which only checks the first byte of a caller-supplied buffer for user-readability, ignoring the full buffer size. This allows privileged dispatch code to read or write beyond the intended buffer boundaries, potentially leading to memory corruption or data leakage. The vulnerability is systemic, affecting all protected-module dispatchers relying on this common macro for buffer validation.
CVE-2026-93475 is a critical out-of-bounds write vulnerability in the X.509 parser of Eclipse ThreadX - NetX Duo. The vulnerability arises because the parser accepts RSA public keys of any size, but signature verification uses fixed-size buffers sized for a maximum modulus of 4096 bits. An attacker can supply a certificate with a larger modulus, causing an out-of-bounds write during certificate-chain verification. This flaw is exploitable pre-authentication and affects both TLS/DTLS clients verifying malicious server chains and servers performing client-certificate authentication.