Kernel memory corruption in Samsung Exynos DRM HDR driver affects mobile devices powered by Exynos 1280, 2200, and 1380 SoCs. A heap-based buffer overflow (CWE-122) in the DPU HDR processing path - caused by missing buffer size validation - allows a local low-privileged process to corrupt kernel heap memory and force a system crash. No public exploit has been identified at time of analysis, and Samsung has published a security advisory addressing this issue.
Out-of-bounds memory access in Samsung's CustOS Driver on Exynos 1580 processors exposes a local low-privileged attacker to cross-TEE-boundary memory read and write primitives. The fault is triggered by submitting an oversized shared memory allocation request to the custos_iwc inter-world communication device, which the driver services without adequate bounds validation, potentially leaking secure-world data or corrupting CustOS runtime state. No public exploit code has been identified and CISA has not listed this in KEV at time of analysis.
Use-After-Free in the Samsung Exynos DRM HDR kernel driver causes a kernel crash on devices running Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600 SoCs. The defect lies in the error-handling path of the HDR driver: when a vmap() call fails, cleanup does not properly invalidate the freed mapping, leaving a dangling reference that is subsequently dereferenced, crashing the kernel. The CVSS vector (AV:L/AC:H/PR:L) indicates a local low-privileged attacker can trigger this under specific error conditions, crossing into kernel scope (S:C). No public exploit code or active exploitation has been identified at time of analysis.
Double-free in the Samsung Exynos Display Processing Unit (DPU) kernel driver allows a local low-privileged attacker to corrupt kernel heap memory and trigger a use-after-free condition across nine Exynos chip families spanning mid-range to flagship Samsung devices. Exploitation requires meeting a high-complexity timing condition during DMA buffer reallocation in the DPU driver, limiting practical attack surface despite the kernel-level impact. No public exploit code exists and this CVE has not been added to the CISA KEV catalog at the time of analysis.
Out-of-bounds write in the Samsung Exynos Display Processing Unit (DPU) kernel driver enables a local low-privileged attacker to corrupt kernel memory and potentially escalate privileges on devices running Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600 mobile processors. The flaw stems from missing input length validation in the color mode LUT (Look-Up Table) parsing path of the DPU driver, allowing attacker-controlled data to overflow a kernel buffer. No public exploit code has been identified at time of analysis, though the Samsung semiconductor advisory page confirms the issue and implies a patch is available.
A race condition in the IBM i WebSocket handshake process allows a remote authenticated attacker to obtain sensitive information on IBM i 7.6, 7.5, 7.4, and 7.3. The flaw requires valid credentials and a precisely timed concurrent request pattern (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N, base 4.2), so it is a low-severity, non-automatable issue rather than a mass-exploitation candidate. CISA's SSVC assessment rates exploitation as 'none' with no automatable path, and no public exploit code has been identified at time of analysis; IBM has published a vendor patch.
Plaintext credential storage in CONTEC's CONPROSYS nano Series industrial remote I/O devices exposes passwords to attackers with physical device access. Affecting multiple coupler unit models (server-type, EtherNet/IP adapter, and software PLC variants), the flaw means credentials are recoverable without decryption from device storage. No public exploit code or active exploitation has been identified; the physical access prerequisite and high attack complexity substantially limit real-world risk.
Baseband crash in Samsung Exynos mobile processors and modems allows a nearby attacker operating a rogue 5G base station to remotely crash the cellular modem by sending malformed, unauthenticated downlink NR RRC Setup messages. The flaw affects a wide range of Exynos chipsets - from Exynos 1080 through 2500, W1000, and Modem 5300/5400/5410 - used in Samsung Galaxy smartphones and tablets. Exploitation results in loss of cellular connectivity (DoS) on the affected device; no public exploit code has been identified at time of analysis.
A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser, pam_parse_in_data(). A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This can trigger an out-of-bounds read, potentially causing the PAM responder to terminate or restart, leading to a local denial of service.
Local unprivileged users on hosts running the System Security Services Daemon (SSSD) can crash or destabilize the NSS responder by sending a crafted zero-length request to its socket, degrading name-service lookups for every process on the machine. The defect is an integer underflow (CWE-191) in the responder's request parsing, and it is scored CVSS 4.0 because only availability is impacted and the attack requires local access to the host. There is no evidence of active exploitation or public exploit code at the time of analysis, and no vendor-listed fix version is available in the supplied intelligence.
An out-of-bounds read in the SSSD NSS responder allows any local user who can reach the responder's UNIX socket to crash the process by sending a specially crafted service lookup request, degrading local name/service resolution on the host. Only SSSD deployments shipped with Red Hat Enterprise Linux 6 through 10 and OpenShift Container Platform 4 nodes are listed as affected by the vendor CPE data, and the flaw requires local socket access rather than network reach. There is no public exploit code and no CISA KEV listing; SSVC records exploitation as 'none' and the issue carries a modest CVSS 3.1 base score of 4.0 (availability impact only).
Unquoted LocalSystem service ImagePath in a Windows component distributed by Ubuntu/Canonical enables local privilege escalation to SYSTEM. When a Windows service ImagePath contains spaces and is not enclosed in quotes, the Windows Service Control Manager attempts to resolve the binary by trying each path segment prefix in order - allowing a lower-privileged local attacker who can write to an intermediate directory to place a malicious executable that runs under LocalSystem context on next service start or system reboot. No patch version, CVSS score, or CWE has been assigned in the input data; no public exploit or KEV listing is present at time of analysis.
Unbounded transmit (tx) buffer growth in the Linux kernel's DHCP subsystem can exhaust system memory when traffic is unidirectional. The defect allows the kernel's DHCP-related transmit path to accumulate resources indefinitely - packets or descriptors are enqueued without corresponding release when bidirectional flow acknowledgment is absent. Systems running DHCP client or server functionality via the affected kernel subsystem are exposed to denial-of-service through memory exhaustion. No public exploit has been identified at time of analysis.
NULL pointer dereference in the datasets library (likely HuggingFace datasets or a similar data-processing package) crashes the host process when parsing unexpected or malformed NDJSON (Newline Delimited JSON) files. Any application or pipeline that loads attacker-influenced NDJSON data through the affected library is exposed to a denial-of-service condition. No public exploit has been identified at time of analysis, and no CVSS or CWE data has been assigned yet by NVD.
Buffer over-read in quoted-printable MIME decoding exposes systems that process MIME-encoded content to out-of-bounds memory reads, potentially causing crashes or leaking adjacent heap contents. The vulnerability resides in the quoted-printable decoder of a MIME parsing library, affecting any application that processes untrusted MIME input such as email clients, mail transfer agents, or content-processing pipelines. No public exploit code has been identified at time of analysis, and CVSS scoring data has not yet been published by NVD or the vendor.
Resource exhaustion in an MQTT implementation tracked by Ubuntu allows an attacker to submit an unbounded number of messages within a single transaction, likely leading to memory or CPU exhaustion and denial of service. The affected component, version range, and exact package have not been confirmed from the available data - only Ubuntu's vendor tracking is present. No CVSS score, CWE, EPSS, KEV listing, or patch information was provided, making a full risk assessment impossible at this time.
Heap buffer overflow in SWF (Shockwave Flash) decompression depth handling affects a file analysis engine - most likely ClamAV, based on the 'detect/file_data' module path and Ubuntu as the reporting vendor. An attacker can supply a specially crafted SWF file that, when scanned, triggers out-of-bounds writes on the heap during recursive or depth-tracked decompression, potentially leading to process crash or arbitrary code execution within the scanning daemon. No patch version, CVSS vector, or CWE is included in the input; no public exploit is identified at time of analysis.
CVE-2026-78030 has no publicly available description, CVSS score, CWE classification, or affected version data at time of analysis. The sole intelligence signal is a vendor:ubuntu reporter tag. No meaningful technical characterization of the vulnerability is possible from the provided data.
SMTP evasion via incomplete state reset in an Ubuntu-reported component allows an attacker to bypass protocol-level security controls by exploiting improper state machine cleanup between SMTP sessions or command sequences. The vulnerability enables crafted SMTP interactions to carry over state from a prior transaction into a new one, potentially allowing filter evasion, spoofed sender identity acceptance, or bypass of per-message security checks. No CVSS score, CWE, or patch version is currently assigned in NVD, and data is extremely sparse - the analysis below reflects significant inference from the vulnerability class.
Deadlock in the Linux kernel IP defragmentation subsystem occurs when processing fragmented encapsulated (tunneled) traffic, allowing a remote attacker to trigger a kernel locking deadlock by sending specially crafted fragmented tunnel packets. Any Linux system with active tunnel interfaces (GRE, IPIP, VXLAN, or similar encapsulation) and IP defragmentation enabled is potentially affected. The result is a denial-of-service condition causing the affected network path or system to hang, with no confidentiality or integrity impact identified. No public exploit or active exploitation has been identified at time of analysis.
IPv4/IPv6 hash collision in Suricata's IPPair tracking mechanism causes the engine to reuse state belonging to the wrong IP pair, leading to incorrect stateful evaluation of network traffic. The vulnerability affects deployments where both IPv4 and IPv6 traffic is processed and IPPair-based rules or datasets are active. An attacker who can craft traffic that induces a hash collision may cause Suricata to apply the wrong connection state, potentially bypassing detection rules that depend on per-pair tracking. No public exploit or CISA KEV listing has been identified at time of analysis.