PoC Archive PoC Archive

tag

Integer-Overflow

Windows Message Queuing (MSMQ) Queue Manager Heap-Based Buffer Overflow (CVE-2026-54992)
CVE-2026-54992 network Patched
CVE-2026-54992networkHIGH 8.4Patched2026-07-27Dolby Unified (DDPlus) Decoder Out-of-Bounds Write via Evolution Data (CVE-2025-54957)
CVE-2025-54957 binary Unverified
CVE-2025-54957binaryCRITICAL 9.8Unverified2026-07-06Windows HTTP.sys Header-Count-Triggered Kernel Memory Corruption / BSOD (CVE-2026-49160) EPSS 54%
CVE-2026-49160 binary Patched
CVE-2026-49160binaryHIGHPatched2026-07-05VirtualBox DevVGA_VBVA Integer Overflow leading to Guest-Triggerable DoS (CVE-2026-35250)
CVE-2026-35250 binary Unverified
CVE-2026-35250binaryLOW 2.3Unverified2026-07-05Tasmota fetch_jpg() Integer Wraparound to Heap Corruption (CVE-2026-38427)
CVE-2026-38427 network Patched
CVE-2026-38427networkCRITICAL 9.8Patched2026-07-05Tasmota fetch_jpg() Combined Buffer Overflow RCE Chain (CVE-2026-38422)
CVE-2026-38422 network Patched
CVE-2026-38422networkCRITICAL 9.8Patched2026-07-05PgBouncer SASL Length Field Integer Overflow Crash — CVE-2026-6664
CVE-2026-6664 network Patched
CVE-2026-6664networkHIGHPatched2026-07-05libssh2 Unchecked SSH packet_length Integer Wrap to RCE (CVE-2026-55200)
CVE-2026-55200 network Patched
CVE-2026-55200networkCRITICALPatched2026-07-03libssh2 Publickey Subsystem List Parser Heap Corruption to Code Execution
None assigned as of 2026-07-03 network Unverified
None assigned as of 2026-07-03networkCRITICALUnverified2026-07-03libarchive ZIP Declared-Size Boundary Bypass via debuginfod
None assigned as of 2026-07-03 binary Unverified
None assigned as of 2026-07-03binaryMEDIUMUnverified2026-07-03libssh2 SSH Packet Length OOB Heap Write / Unauthenticated RCE (CVE-2026-55200)
CVE-2026-55200 network Patched
CVE-2026-55200networkCRITICAL 9.8Patched2026-06-30