By weakness (CWE)
CWE-805: related vulnerabilities
CVEs classified under CWE-805. Understanding the weakness class helps prioritize systemic fixes over one-off patches.
7 published vulnerabilities
- CVE-2026-53016HIGH 7.8
A buffer overflow vulnerability exists in the Linux kernel's AMD CCP (Cryptographic Coprocessor) crypto driver. When processing RFC3686 counter mode AES encryption requests via the AF_ALG socket interface, the driver incorrectly writes 16 bytes of data into an 8-byte buffer during IV (initialization vector) restoration. This causes memory corruption that a local, authenticated attacker can exploit to escalate privileges or crash the system. The issue stems from using a fixed block size constant instead of respecting the algorithm's actual IV size requirement.
- CVE-2026-44893HIGH 7.5
Netty's HAProxy protocol decoder has a resource leak vulnerability triggered by malformed protocol messages. When an attacker sends a specially crafted HAProxy TLV (Type-Length-Value) structure with an undersized length field, the decoder attempts to read data beyond the declared bounds. The exception that follows bypasses the error handler, leaving memory buffers permanently unreleased. This cumulates over repeated malicious messages, exhausting available memory and crashing the application.
- CVE-2026-1766MEDIUM 5.6
A heap buffer overflow vulnerability exists in GNOME localsearch's MP3 file parser. When processing maliciously crafted MP3 files with corrupted ID3v2.3 comment tags, the tracker-extract-mp3 component can crash or leak sensitive data from system memory. An attacker needs local access and user interaction (opening or processing the file) to trigger the flaw. This is a moderate-risk issue affecting Linux systems running affected GNOME versions.
- CVE-2026-1767MEDIUM 5.6
GNOME's localsearch application contains a heap buffer overflow flaw in its MP3 file processor that can be triggered when a specially crafted MP3 file with malformed ID3 tags is scanned or indexed. An attacker who can place a malicious MP3 on a system would cause the application to crash (denial of service) or potentially leak sensitive information from memory. This is not a remote code execution vulnerability and requires local access and user interaction to exploit.
- CVE-2026-12549MEDIUM 4.8
A regression in HTTP Range request handling allows clients to craft requests that bypass security checks, resulting in malformed responses and potential service disruption. When a Range request specifies a suffix length larger than the content being served, the code fails to properly validate the resulting negative offset, leading to incorrect HTTP 206 Partial Content responses and excessive logging that can consume resources.
- CVE-2026-53877MEDIUM 4.8
Django's GIS (Geographic Information System) module contains a buffer over-read vulnerability when processing binary geographic data. An attacker could craft malicious geographic data that, when parsed by a Django application, either exposes sensitive information from the server's memory or crashes the application. The vulnerability affects Django 6.0 before version 6.0.7 and 5.2 before version 5.2.16, with earlier unsupported versions potentially vulnerable as well.
- CVE-2026-15028LOW 3.9
A security flaw in libarchive allows an attacker to cause a heap overflow by crafting a specially designed tar archive file. The vulnerability exists in how the library handles PAX extended headers, specifically a malformed SUN.holesdata attribute used for sparse files. When a victim opens such a file, it can crash the system (denial of service) or potentially allow the attacker to execute arbitrary code. However, the vulnerability requires local access and user interaction, which limits its immediate threat scope.