NIXPKGS-2026-1184

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-40339

5.2 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-42cm-m9hc-r7q8 x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/09f8a940b1e418b5693f5c11e3016a1ad2cea62d x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1183

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-40336

2.4 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.c

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-g8xw-p5wj-mrxv x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/404ff02c75f3cb280196fc260a63c4d26cf1a8f6 x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1182

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-35512

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse ignored package pulseaudio-module-xrdp 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

xrdp: Heap buffer overflow in EGFX channel

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-jg6p-7fg8-9hh6 x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

NIXPKGS-2026-1181

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-40334

3.5 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-ph87-cc3j-c6hm x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/259fc7d3bfe534ce4b114c464f55b448670ab873 x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1180

GitHub issue published 4 months, 4 weeks ago

          Permalink
          
            CVE-2026-40527
          
        7.8 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          4 months, 4 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              accepted
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          4 months, 4 weeks ago
          
            radare2 Command Injection via DWARF Parameter Names
          
      https://github.com/radareorg/radare2/pull/25821
    
    issue-tracking
  
      https://github.com/radareorg/radare2/commit/bc5a89033db3ecb5b1f7bf681fc6ba4dcfc…
    
    patch
  
          Ignored references (1)
        
      https://www.vulncheck.com/advisories/radare2-command-injection-via-dwarf-parame…
    
    third-party-advisory
  
    radare2

            <bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683