Threats Tagged 'cwe-680'

CVE-2026-76825 is a high-severity vulnerability in zopefoundation's RestrictedPython prior to version 8.4. The issue allows restricted code to escape the sandbox by exploiting the string.Formatter class and its methods, which bypass RestrictedPython's attribute access protections. This can lead to unauthorized access to function globals, builtins, file access, or code execution primitives, impacting confidentiality, integrity, and availability. The vulnerability is fixed in version 8.4.

CVE-2026-81647 is an out-of-bounds read vulnerability in a graphics module that may impact system availability if exploited. It has a CVSS 3.1 base score of 5.3, indicating medium severity. There is no information on affected software versions or available patches. No known exploits are reported in the wild.

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in malloc() calls can wrap past INT32_MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causing heap corruption and potentially achieving arbitrary code execution through subsequent batch operations that write past allocated buffer boundaries.

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer. A caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve#cve-2026-24928#cwe-680

CVE-2026-25541 is a medium severity integer overflow vulnerability in the tokio-rs bytes library affecting versions 1.2.1 through 1.11.0. The issue arises in the BytesMut::reserve function where unchecked addition can overflow the usize type in release builds, corrupting the capacity value. This can lead to out-of-bounds slices and undefined behavior, potentially causing memory corruption or crashes. No authentication or user interaction is required to trigger the vulnerability. It has been patched in version 1.11.

MediumVulnerabilityGermanyFranceNetherlands+5#cve#cve-2026-25541#cwe-680

An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 8f062d3f661e20bb19b24b767b9a9a46e8359f2b.

CriticalVulnerabilityGermanyFranceUnited Kingdom+5#cve#cve-2025-54952#cwe-680

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service.

HighVulnerabilityGermanyFranceUnited Kingdom+5#cve#cve-2025-23326#cwe-680