These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB servers to trigger heap out-of-bounds reads via crafted security descriptors. This vulnerability can lead to denial of service and potential data breaches. Defenders should prioritize verification and remediation to prevent exploitation. The vulnerability is caused by an integer underflow in the decode_ [truncated]
libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info that allows malicious SMB servers to read past reply buffers. Attackers controlling a server or intercepting unsigned sessions can send crafted QUERY_INFO replies with missing or oversized name lengths to crash the client. The vulnerability affects libsmb2, potenti [truncated]
libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients by sending an unchecked FileNameLength. Attackers controlling the server or performing man-in-the-middle on unsigned sessions can return crafted FileAllInformation replies to smb2_stat or smb2_fstat calls, crashing the client.
libnfs through 6.0.2 before 7613236 has a HIGH-severity out-of-bounds write vulnerability in the ZDR decoding functionality related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The issue arises because the caller-supplied maxsize value is not honored, potentially leading to security risks. Defenders should assess exposure and prioritize patching to mitigate pot [truncated]
CVE-2026-53689 is a HIGH severity vulnerability in libnfs through 6.0.2 before 55c18ea. The vulnerability occurs due to an integer overflow during a connection to a crafted NFS server. This happens in libnfs_zdr_string in lib/libnfs-zdr.c. The CVSS score for this vulnerability is 7.1.