https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:19:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-356827 EUVD-2026-356827 https://cve.radiocsirt.org/vuln/euvd-2026-356827 https://cve.radiocsirt.org/vuln/fkie_cve-2026-65610 <p>nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim&#39;s execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression (homelen - 1) is promoted to signed int and becomes -1 and producing an out-of-bounds read and an out-of-bounds write one byte before the path buffer.</p> <p>Maintainer of this project was notified about this vulnerability. It might has been addressed, but the maintainer did not provide a vulnerable version range. Only version 5.2 was tested and confirmed as vulnerable.</p> <p>nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim&#39;s execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression (homelen - 1) is promoted to signed int and becomes -1 and producing an out-of-bounds read and an out-of-bounds write one byte before the path buffer.</p> <p>Maintainer of this project was notified about this vulnerability. It might has been addressed, but the maintainer did not provide a vulnerable version range. Only version 5.2 was tested and confirmed as vulnerable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-65610 https://cve.radiocsirt.org/vuln/ghsa-2fq9-p2vj-rc2v <p>nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim&#39;s execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression (homelen - 1) is promoted to signed int and becomes -1 and producing an out-of-bounds read and an out-of-bounds write one byte before the path buffer.</p> <p>Maintainer of this project was notified about this vulnerability. It might has been addressed, but the maintainer did not provide a vulnerable version range. Only version 5.2 was tested and confirmed as vulnerable.</p> <p>nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim&#39;s execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression (homelen - 1) is promoted to signed int and becomes -1 and producing an out-of-bounds read and an out-of-bounds write one byte before the path buffer.</p> <p>Maintainer of this project was notified about this vulnerability. It might has been addressed, but the maintainer did not provide a vulnerable version range. Only version 5.2 was tested and confirmed as vulnerable.</p> https://cve.radiocsirt.org/vuln/ghsa-2fq9-p2vj-rc2v https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-65610 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: nnn, Ubuntu:20.04:LTS: nnn, Ubuntu:22.04:LTS: nnn, Ubuntu:24.04:LTS: nnn, Ubuntu:26.04:LTS: nnn</p> <p>nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim&#39;s execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression (homelen - 1) is promoted to signed int and becomes -1 and producing an out-of-bounds read and an out-of-bounds write one byte before the path buffer. Maintainer of this project was notified about this vulnerability. It might has been addressed, but the maintainer did not provide a vulnerable version range. Only version 5.2 was tested and confirmed as vulnerable.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: nnn, Ubuntu:20.04:LTS: nnn, Ubuntu:22.04:LTS: nnn, Ubuntu:24.04:LTS: nnn, Ubuntu:26.04:LTS: nnn</p> <p>nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim&#39;s execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression (homelen - 1) is promoted to signed int and becomes -1 and producing an out-of-bounds read and an out-of-bounds write one byte before the path buffer. Maintainer of this project was notified about this vulnerability. It might has been addressed, but the maintainer did not provide a vulnerable version range. Only version 5.2 was tested and confirmed as vulnerable.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-65610