Tag
#Memory Corruption
CVE-2026-82539: Critical Remote Memory Corruption Vulnerability in TOTOLINK A720R
A critical vulnerability (CVE-2026-82539) with a CVSS score of 9.1 was discovered in TOTOLINK A720R 4.1.5cu.630_B20250509, affecting the MAC Filtering component. The vulnerability allows remote attackers to execute memory corruption via manipulation of the 'desc' argument in the setMacFilterRules function of cstecgi.cgi. The attack can be launched remotely, and the exploit has been publicly disclosed. Immediate patching or mitigation is recommended to prevent potential exploitation.
Understanding and Defending Against CVE-2026-20345: ClamAV GPT File Format Parser Vulnerability
CVE-2026-20345 is a high-severity vulnerability in the GPT file format parser of ClamAV, a popular open-source antivirus engine. This vulnerability allows an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition or potentially lead to memory corruption on an affected device. The vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. This analysis will delve into the root cause, attack surface, exploitation mechanics, real-world impact, detection strategies, and defensive measures for this critical vulnerability.