SUSE CVE-2026-63963

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Properly validate the count passed from a device when calling svdmconsumeidentity or svdmconsumeidentitysopprime as the device-controlled value could index of...

CVE-2026-63963

A flaw was found in the Linux kernel's USB Type-C subsystem. A malicious or malformed USB Type-C device could send an invalid Vendor Defined Object VDO count during the Discover Identity Acknowledgement ACK process. This improper validation could allow the device to read beyond the intended memor...

CVE-2026-64608 Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and...

CVE-2026-64608 Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and...

CVE-2026-64608

The Apache Fory C++ implementation is vulnerable to heap type confusion and out-of-bounds read/write (CVE-2026-64608). The root cause lies in the deserialization process when operating in compatible mode , where field-skip paths fail to properly validate declared field types against the actual da...

ANT-2026-D7FC4YDQ · rabbitmq-c · Heap-buffer-overflow

heap-buffer-overflow high CVE-2026-44236 Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-D7FC4YDQ: Heap-buffer-overflow in...

[SECURITY] Fedora 43 Update: c-ares-1.34.8-1.fc43

c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...

PT-2026-62262

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/C++ versions 9.7.0 through 9.7.1 Description An unauthenticated attacker with network access via multiple protocols can compromise the software. This issue allows the attacker to cause a hang or a frequently repeatable...

CVE-2026-60179: Improper Access Control

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++. Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

EulerOS Virtualization 2.10.1 : glibc (EulerOS-SA-2026-2819)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...

Tool-Guided Retrieval-Augmented Repair for Securing LLM-Generated C Code

Large language models can generate C code from natural-language descriptions, but resulting programs often contain security vulnerabilities and compilation errors, posing risks for embedded and resource-constrained systems. This work investigates how feedback and retrieval improve reliability of...

CVE-2026-64608: Access of Resource Using Incompatible Type

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and...

PT-2026-61853

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and...

PT-2026-62261

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/C++ versions 9.7.0 through 9.7.1 Description An issue in the MySQL Connectors product allows an unauthenticated attacker with network access via multiple protocols to compromise the system. Successful exploitation can le...

The vulnerability of the rt_headclear() function in the route.c file of the DHCP server dhcpcd allows a intruder to trigger a service failure.

The vulnerability of the rtheadclear function in the route.c file is related to the pointer assignment when accessing the ctx field. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-60180: Uncontrolled Resource Consumption

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++. Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

ALSA-2026:42733 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2026-2850)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...

SUSE SLES12 Security Update : mariadb-connector-c (SUSE-SU-2026:3135-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3135-1 advisory. This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for...

SUSE SLES15: libmariadb-devel / libmariadb3 / libmariadb_plugins / etc (SUSE-SU-2026:3134-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3134-1 advisory. This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438...