9515 matches found
CVE-2026-22774
CVE-2026-22774 affects the Svelte devalue library. From versions 5.3.0 through 5.6.1, certain inputs trigger devalue.parse to consume excessive CPU time and memory when processing untrusted data, potentially causing denial of service. Root cause: typed array hydration assumes an ArrayBuffer input...
CVE-2025-70299
A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...
UBUNTU-CVE-2025-70299
A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...
CVE-2025-70299
A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...
CVE-2025-70298
GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmxparsetags function...
CVE-2025-70298
GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmxparsetags function...
OSV-2026-57 Heap-buffer-overflow in mkv::matroska_segment_c::TrackInit
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475261418 Crash type: Heap-buffer-overflow READ 1 Crash state: mkv::matroskasegmentc::TrackInit mkv::matroskasegmentc::TrackInit mkv::matroskasegmentc::ParseTrackEntry...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002216)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002216 advisory. The parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service unkillable mount proce...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002962)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002962 advisory. The imspcuparsecdcdata function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service...
GPAC security vulnerabilities
GPAC is an open source multimedia framework. GPAC has a stack buffer overflow vulnerability that originates from the uncvparseconfig function failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...
CVE-2025-70299
A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...
CVE-2025-70303
The open source multimedia framework GPAC v2.4.0 is affected by a heap buffer overflow vulnerability (also described as a stack buffer overflow in some reports) within the uncv_parse_config() function. The root cause is a failure to properly validate the length size of the input data . An attacke...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003213)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003213 advisory. The imspcuparsecdcdata function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service...
CVE-2025-70303
A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002696)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002696 advisory. The usbhidparse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service out-of-bounds read and...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002577)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002577 advisory. The cdcparsecdcheader function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002502)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002502 advisory. An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755parsedt. Tenable has...
GPAC security vulnerabilities
GPAC is an open source multimedia framework. GPAC has a heap buffer overflow vulnerability that stems from the aviparseinputfile function failing to properly validate the length and size of the input data, which can be exploited by an attacker to cause a denial of service...
CVE-2025-70298
The GPAC open source multimedia framework (v2.4.0) contains an out-of-bounds read vulnerability within the oggdmx_parse_tags function. This flaw occurs because the function fails to properly validate the length size of the input data, leading to memory access beyond buffer boundaries. An attacker...
