Tag
#Heap Buffer Overflow
CVE-2026-20466: MediaTek Chipset Heap Buffer Overflow Vulnerability
A heap buffer overflow vulnerability (CVE-2026-20466) has been identified in MediaTek chipsets, specifically in the secure boot mechanism. This vulnerability could lead to local escalation of privilege if an attacker has physical access to the device. The CVSS score for this vulnerability is 6.1, indicating a medium severity. Affected chipsets include MT2737, MT6880, MT6890, and MT6990. Patches are available to mitigate this vulnerability.
Understanding and Defending Against CVE-2026-56001: A Heap Buffer Overflow in libXfont2
CVE-2026-56001 is a heap buffer overflow vulnerability in the BitmapScaleBitmaps function of libXfont2, a library used for font rendering in X.Org. This vulnerability has a CVSS score of 8.5 and could allow attackers with access to the X Server to execute code within the server context. The vulnerability is caused by an overflowing 32-bit size in the BitmapScaleBitmaps function. This analysis will delve into the root cause, attack surface, exploitation mechanics, real-world impact, detection, and defense strategies for this critical vulnerability.
Critical Heap Buffer Overflow Vulnerability in X.Org xorg-server and xwayland
A critical vulnerability, CVE-2026-55999, with a CVSS score of 8.5, was discovered in X.Org's xorg-server and xwayland. Local attackers with an X connection can exploit this vulnerability to cause a heap buffer overflow via SetFont due to missing glyph boundary checks. Affected versions include xorg-server before 21.2.24 and xwayland before 24.1.13.