Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-90614 — FedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deser…

A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication/s3/remote_storage.py of the …

Remote | Injection
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90613 — GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file isomedia/stbl_read.c of the component MP4Box. The manipulati…

Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90612 — GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf_sm_dump_command_list of the file scene_manager/scene_dump.c of the component MP4Box. The manipulation leads to reach…

| Denial of Service
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90611 — GPAC MP4Box loader_xmt.c xmt_parse_element assertion

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of the component MP4Box. Executing a manipulation can lead to…

| Denial of Service
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90610 — GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read

A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a manipulation results i…

| Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
6.4 MEDIUM
CVE-2026-33964 — Samsung Exynos Camera Driver Untrusted Pointer Dereference Vulnerability

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited info…

exynos_1580_firmware | Information Disclosure
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
7.5 HIGH
CVE-2026-33963 — Samsung Exynos Mobile Processor Camera Stack-Based Buffer Overflow

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the c…

exynos_1330_firmware | Denial of Service
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
2.8 LOW
CVE-2026-33962 — Samsung Exynos Wi-Fi Out-of-Bounds Read Vulnerability

An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read, potentially leadi…

exynos_850_firmware | Information Disclosure
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
2.8 LOW
CVE-2026-33960 — Samsung Exynos Processor Wi-Fi Interface Out-of-Bounds Write Vulnerability

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can le…

exynos_1330_firmware | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
4.2 MEDIUM
CVE-2026-33957 — Samsung Exynos CustOS Driver Out-of-Bounds Memory Access

An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write, potentially leadi…

exynos_1580_firmware | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
2.8 LOW
CVE-2026-33956 — Samsung Exynos Camera Out-of-Bounds Write Vulnerability

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, lea…

exynos_1330_firmware | Denial of Service
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
7.7 HIGH
CVE-2026-31278 — Suprema BioStar Active Directory Credential Disclosure Vulnerability

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in c…

biostar_2 | Remote | Information Disclosure
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.5 LOW
CVE-2026-23793 — Samsung Exynos Camera GDC Driver Out-of-Bounds Memory Access Vulnerability

An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to kernel memory corruption under…

exynos_1330_firmware | Remote | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
4.0 MEDIUM
CVE-2026-23792 — Samsung Exynos Modem NR RRC Denial of Service Vulnerability

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect han…

exynos_1080_firmware | Remote | Denial of Service
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
4.2 MEDIUM
CVE-2026-23791 — Samsung Exynos DPU Driver Out-of-Bounds Write Vulnerability

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver (due to missi…

exynos_1280_firmware | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
4.2 MEDIUM
CVE-2026-23790 — Samsung Exynos DPU Driver Double-Free Vulnerability

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improp…

exynos_1280_firmware | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
7.8 HIGH
CVE-2026-23789 — Samsung Exynos MFC Encoder Driver Double-Free Vulnerability

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-f…

exynos_850_firmware | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
4.2 MEDIUM
CVE-2026-23788 — Samsung Exynos DPU Heap Overflow

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer size validation) leads to kernel memory co…

exynos_1280_firmware | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90609 — GPAC MP4Box vrml_tools.c null pointer dereference

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml_tools.c of the component MP4Box. Such manipulation leads to null pointer…

| Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
9.9 CRITICAL
CVE-2026-90608 — Totolink A3002MU boa formPortFw buffer overflow

A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation of the argument ser…

Remote | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
Showing 20 of 13152 Results