Skip to content
OpenAdvisories

Product · NetBSD

src

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-32848

    NetBSD cryptodev Race Condition Double-Free via cryptodev_op()

    NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier…

    NetBSD src
  • Medium 5.5
    CVE-2026-32849

    NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c

    NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop->dst_len value, causing…

    NetBSD src