CVE-2026-6325

HighCVSS 7.5/10Last modified Jun 27, 2026

Description

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jun 25, 2026
Last modified: Jun 27, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-632527.5In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel CVE-2026-632594.3Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that r CVE-2026-632606.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated a CVE-2026-632616.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged a CVE-2026-632624.3Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumven CVE-2026-632636.5Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An au CVE-2026-632645.3Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3 - The Joomla extension JoomShopping is vulnerable to an reflect CVE-2026-632658.0Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Pr CVE-2026-632666.8LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document cou CVE-2026-632676.7LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while CVE-2026-632686.7LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name CVE-2026-632696.7LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HL