https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T16:00:04.450308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-356725 EUVD-2026-356725 2026-10-12T16:00:04.452827+00:00 EUVD-2026-356725 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74238 fkie_cve-2026-74238 2026-10-12T16:00:04.452857+00:00

TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() function that allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent heap memory by sending a short UDP datagram. Attackers can send a malformed datagram to the Velodyne UDP sensor port, which lacks sender-address restrictions present in other drivers, causing fabricated points derived from heap memory contents to be silently published into downstream PointCloud2 messages consumed by Autoware nodes.

 https://cve.radiocsirt.org/vuln/ghsa-77m7-4hpw-56g7 GHSA-77m7-4hpw-56g7 2026-10-12T16:00:04.452887+00:00

TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() function that allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent heap memory by sending a short UDP datagram. Attackers can send a malformed datagram to the Velodyne UDP sensor port, which lacks sender-address restrictions present in other drivers, causing fabricated points derived from heap memory contents to be silently published into downstream PointCloud2 messages consumed by Autoware nodes.