Lucene search
+L

22999 matches found

Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.6 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.5 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/03 2:55 a.m.6 views

CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/03 2:44 a.m.54 views

CVE-2026-14682

CVE-2026-14682 affects Bouncy Castle for Java: unbounded up-front allocation on a definite-length read can cause an OOM. Affected: BC-Java before 1.85; BC-LTS before 2.73.12; BC-FJA before bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), 2.1.3 (2.1.x), and before bctls-fips 1.0.24. Impact per NVD: high (C...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/03 2:44 a.m.8 views

EUVD-2026-52132

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/03 2:44 a.m.7 views

CVE-2026-14682 Possible OOM from unbounded up-front allocation on a definite-length read

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/03 2:44 a.m.52 views

CVE-2026-14682 Possible OOM from unbounded up-front allocation on a definite-length read

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS0.00263EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 2:44 a.m.6 views

CVE-2026-14682 Possible OOM from unbounded up-front allocation on a definite-length read

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/08/03 2:44 a.m.10 views

CVE-2026-14682

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References4Affected Software2
Vulnrichment
Vulnrichment
added 2026/08/03 2:37 a.m.7 views

CVE-2026-58060 HSS public-key level count unbounded, enabling huge allocation on verify

In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS5.5AI score0.00365EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 2:37 a.m.57 views

CVE-2026-58060 HSS public-key level count unbounded, enabling huge allocation on verify

In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS0.00365EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/03 12:48 a.m.10 views

CVE-2026-59646

In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0References5Affected Software2
Debian CVE
Debian CVE
added 2026/08/03 12:48 a.m.12 views

CVE-2026-59646

In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0
CVE
CVE
added 2026/08/03 12:48 a.m.54 views

CVE-2026-59646

CVE-2026-59646 affects Bouncy Castle for Java before 1.85 (and BC-Java LTS before 2.73.12, plus BC-FJA before bctls-fips 1.0.24/2.0.24/2.1.24). The root cause is the DTLS handshake reassembler allocating a buffer from an unchecked 24-bit length. This can impact DTLS processing and buffer handling...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 12:38 a.m.54 views

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/03 12:38 a.m.8 views

EUVD-2026-52021

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/03 12:0 a.m.22 views

PT-2026-67046

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References3
Redos
Redos
added 2026/08/03 12:0 a.m.6 views

ROS-20260803-73-0033

The vulnerability of the iwlwifi component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

7.8CVSS6.3AI score0.00249EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/02 2:20 p.m.41 views

CVE-2026-10774 PSA key-slot leak in Bluetooth Mesh subnet deletion leading to resource-exhaustion DoS

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, netkeyscreate imports the Private Beacon Key into a PSA key slot under CONFIGBTMESHPRIVBEACONS enabled by default, but subnetkeysdestroy guarded the matchin...

2.4CVSS0.00179EPSS
SaveExploits1References2
Rows per page
Query Builder