Threats Tagged 'cve-2026-41676'

Multiple security vulnerabilities affecting libkrun related to OpenSSL have been addressed in a security update. These include use-after-free, buffer overflow, out-of-bounds read and write, stack corruption, information leak, undefined behavior, and heap buffer overflow issues. The vulnerabilities impact cryptographic operations and certificate processing. The update fixes these issues in affected versions of libkrun. No known exploits in the wild have been reported.

This security update for python-cryptography addresses multiple vulnerabilities related to OpenSSL, including buffer overflows, out-of-bounds reads and writes, memory leaks, and undefined behavior in certificate handling. These issues affect cryptographic operations such as key derivation, password callbacks, AES key wrapping, and message digest finalization. The vulnerabilities have been assigned CVE identifiers ranging from CVE-2026-41676 to CVE-2026-45784. No specific affected versions are stated in the provided data.

This security update for python-maturin addresses multiple high-severity vulnerabilities in OpenSSL components used by the product. The issues include buffer overflows, out-of-bounds reads and writes, memory leaks, and undefined behavior in cryptographic operations. These vulnerabilities could lead to memory corruption or information leakage. No specific affected versions are stated. No CVSS score is provided, but the impact is assessed as high due to the nature of the flaws.

A security update for rust-keylime addresses multiple vulnerabilities in the OpenSSL library used by the software. These include buffer overflows, out-of-bounds reads and writes, memory leaks, and undefined behavior issues affecting cryptographic operations. The update advances rust-keylime to version 0.2.9+49, incorporating OpenSSL version 0.10.81 and fixing these security issues. No specific affected versions of rust-keylime are stated.

Multiple security vulnerabilities in ClamAV were fixed in version 1.5.3, including several out-of-bounds write issues during scanning of various file formats (PE, FSG, 7z, PESpin, ALZ, DMG), an integer overflow leading to denial of service, and a buffer overflow related to OpenSSL 1.1.1. Additional bug fixes address unpacker cleanup, archive extraction limits, parser size handling, and quarantine action hardening. These vulnerabilities could lead to crashes, denial of service, or memory corruption during file scanning.

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.