Threats Tagged 'cwe-134'

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6.

Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.

CVE-2026-73782 is a format string vulnerability in the command line interface of Hewlett Packard Enterprise (HPE) AOS-CX. This vulnerability allows unauthenticated remote code execution, enabling an attacker to run arbitrary code with privileged operating system access. The affected versions include 10.10.0000, 10.13.0000, 10.16.0000, 10.17.0000, and 10.18.0000. The vulnerability has a high severity rating with a CVSS score of 8.8. No patch or remediation information is currently provided by the vendor. There are no known exploits in the wild at this time.

A format string vulnerability (CWE-134) exists in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1, which could allow a local attacker to gain elevated privileges. The vulnerability has a high severity with a CVSS score of 7. It requires local access with high attack complexity and no user interaction. No official patch or remediation information is currently available.

CVE-2026-81574 is a high-severity vulnerability in Wibu-Systems-AG CodeMeter Runtime before versions 8.41a and 9.10. The logger component does not sanitize input strings properly, allowing attackers to inject printf-style format specifiers. This can cause the application to crash and potentially disclose sensitive information such as process memory and stack canaries. The vulnerability can be exploited locally by setting proxy values and remotely when combined with another vulnerability (CVE-2026-81573).

CVE-2026-17136 is a critical format string vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This vulnerability could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The flaw arises from improper handling of externally-controlled format strings.

This update includes the following RPMs: ruby4.0: * ruby4.0-4.0.6-37.2.hum1 (aarch64, x86_64) * ruby4.0-bundled-gems-4.0.6-37.2.hum1 (aarch64, x86_64) * ruby4.0-default-gems-4.0.6-37.2.hum1 (noarch) * ruby4.0-devel-4.0.6-37.2.hum1 (aarch64, x86_64) * ruby4.0-doc-4.0.6-37.2.hum1 (noarch) * ruby4.0-libs-4.0.6-37.2.hum1 (aarch64, x86_64) * rubygem4.0-bigdecimal-4.0.1-37.2.hum1 (aarch64, x86_64) * rubygem4.0-bundler-4.0.16-37.2.hum1 (noarch) * rubygem4.0-devel-4.0.16-37.2.hum1 (noarch) * rubygem4.0-io-console-0.8.2-37.2.hum1 (aarch64, x86_64) * rubygem4.0-irb-1.16.0-37.2.hum1 (noarch) * rubygem4.0-json-2.18.0-37.2.hum1 (aarch64, x86_64) * rubygem4.0-minitest-6.0.0-37.2.hum1 (noarch) * rubygem4.0-power_assert-3.0.1-37.2.hum1 (noarch) * rubygem4.0-psych-5.3.1-37.2.hum1 (aarch64, x86_64) * rubygem4.0-racc-1.8.1-37.2.hum1 (aarch64, x86_64) * rubygem4.0-rake-13.3.1-37.2.hum1 (noarch) * rubygem4.0-rbs-3.10.0-37.2.hum1 (aarch64, x86_64) * rubygem4.0-rdoc-7.0.4-37.2.hum1 (noarch) * rubygem4.0-rexml-3.4.4-37.2.hum1 (noarch) * rubygem4.0-rss-0.3.2-37.2.hum1 (noarch) * rubygem4.0-rubygems-4.0.16-37.2.hum1 (noarch) * rubygem4.0-test-unit-3.7.5-37.2.hum1 (noarch) * rubygem4.0-typeprof-0.31.1-37.2.hum1 (noarch) * ruby4.0-4.0.6-37.2.hum1.src (src) Security Fix(es): ruby4.0: * CVE-2026-33210

CVE-2026-15961 is a medium severity vulnerability in IBM PowerVM Hypervisor versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80. It involves improper control of externally-controlled format strings, which could allow a local attacker with high privileges to obtain sensitive information or cause a denial of service. The vulnerability requires high attack complexity and privileges, with no user interaction needed.

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a format string injection vulnerability in the management interface that allows attackers to cause denial of service and information disclosure by crafting a malicious HTTP request.

A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue to disclose memory information or cause denial of service of the affected component. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.