22844 matches found
CVE-2026-31572 i2c: designware: amdisp: Fix resume-probe race condition issue
In the Linux kernel, the following vulnerability has been resolved: i2c: designware: amdisp: Fix resume-probe race condition issue Identified resume-probe race condition in kernel v7.0 with the commit 38fa29b01a6a "i2c: designware: Combine the init functions",but this issue existed from the...
c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in read_lazy_chunk_bytes
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4963328186449920 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Addres...
JLSEC-2026-183
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability...
c-blosc2:decompress_chunk_fuzzer: Heap-buffer-overflow in ZSTDv05_decompressBegin_usingDict
Detailed Report: https://oss-fuzz.com/testcase?key=4684225239646208 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompresschunkfuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf5600673 Crash State:...
Joern 4.0.527
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Mojic 安全漏洞
Mojic is a C-language code obfuscation tool developed by Amit Dutta. Versions of Mojic prior to 2.1.4 contained security vulnerabilities. These vulnerabilities stemmed from the use of the standard equality operator by CipherEngine to verify HMAC-SHA256 integrity checks, which could allow attacker...
GHSA-JJ2G-XQ7W-GF88 vulnerabilities
Vulnerabilities for packages: glibc...
CVE-2026-5358 vulnerabilities
Vulnerabilities for packages: glibc...
JLSEC-2026-179
When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...
JLSEC-2026-182
A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver...
JLSEC-2026-180
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB...
SUSE-SU-2026:21317-1 Security update for glibc-livepatches
This update for glibc-livepatches fixes the following issues: - CVE-2026-4046: Fixed assertion failure when converting inputs may be used to remotely crash an application bsc1261209 - Add support for live-patching the gconv modules sitting in glibc-locale-base or glibc-gconv-modules-extra package...
Security Bulletin: Vulnerabilities in GNU C affects IBM Netezza Appliance
Summary The GNU C package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVEs CVE-2026-0915, CVE-2026-0861, CVE-2025-15281 Vulnerability Details CVEID:CVE-2026-0915 DESCRIPTION: Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that...
PT-2026-36712
Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...
Joern 4.0.526
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
PT-2026-36716
A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver...
PT-2026-36714
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB...
PT-2026-36713
When calling bson utf8 validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2026-014283)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014283 advisory. The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character...
