The vulnerability of the Qualcomm IPA module driver drivers/net/ipa/reg/gsi_reg-v5.0.c in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the Qualcomm IPA module driver in the Linux operating system’s kernel, located at drivers/net/ipa/reg/gsireg-v5.0.c, is related to incorrect type conversion or casting. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the pex_ep_event_pex_rst_deassert() function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI core devices allows a hacker to cause a service failure.

The vulnerability of the pexepeventpexrstdeassert function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI device kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacke...

PT-2026-86265

Name of the Vulnerable Software and Affected Versions Unidata netcdf-c versions prior to 4.10.2 Description An out-of-bounds write occurs in the NC4 HDF5 inq attname function when processing HDF5 files. The issue arises because HDF5 attribute names are copied into a fixed 256-byte buffer without...

CVE-2026-86095: Out-of-bounds Write

Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...

Linux Distros Unpatched Vulnerability : CVE-2026-84964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already...

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

@fancyliu/speclite (>=0.1.0, <=0.3.0), actual-moneymoney (>=3.0.0, <=3.5.0) +1 more potentially affected by CVE-2026-77465 via toml (>=4.1.1, <=4.1.2)

toml NPM version =4.1.1, =0.1.0, =3.0.0, =2.7.0, =2.12.4 Source cves: CVE-2026-77465 Source advisory: OSV:GHSA-82X6-Q7MM-W9CF...

@fancyliu/speclite (>=0.1.0, <=0.3.0), actual-moneymoney (>=3.0.0, <=3.5.0) +1 more potentially affected by CVE-2026-63376 via toml (4.1.1)

toml NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @fancyliu/speclite =0.1.0, =3.0.0, =2.7.0, =2.11.3 Source cves: CVE-2026-63376 Source advisory: OSV:GHSA-V5MP-JGW5-2X6J...

AZL-99093 CVE-2026-33630 affecting package fluent-bit for versions less than 3.1.10-7

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

ALPINE-CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

AZL-99095 CVE-2026-33630 affecting package nodejs 24.18.1-1

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

CVE-2026-33630

c-ares , an asynchronous DNS resolver library, is affected by a use-after-free / double-free in its query-completion handling, present from version 1.32.3 through 1.34.6 and fixed in 1.34.7 . The flaw occurs when a query's callback is invoked while the query is still linked in the channel's inter...

EUVD-2026-70664

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

CVE-2026-33630 c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

CVE-2026-33630 c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

CVE-2026-33630 c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...