CVE-2026-13308

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this...

CVE-2026-64484

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture es1938 sound driver. This vulnerability arises when a memory allocation failure causes the sndctlnew1 function to return a null value. The sndes1938mixer function then attempts to use this null value without proper...

CVE-2026-64480

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA ice1712 driver. This vulnerability occurs because the sndctlnew1 function, which allocates memory, can return a null value upon failure, but the driver does not properly check for this. An attacker could potentially...

CVE-2026-54080

The vulnerability CVE-2026-54080 affects the veraPDF parser. A crafted Type 0 font /Encoding or /ToUnicode CMap stream can trigger unbounded PostScript array allocation or a zero-increment loop, exhausting validator memory or CPU. Affected versions are prior to 1.30.2 and 1.31.23; fixed in 1.30.2...

CVE-2026-64486

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA cmipci component. This vulnerability occurs because the sndcmipcispdifcontrols function fails to check the return value of sndctlnew1, which can return a null pointer if memory allocation fails. A local attacker could...

CVE-2026-64376

A flaw was found in the Linux kernel's firmware loader component. This vulnerability occurs in the firmwareuploadregister function when an allocation failure happens after a device instance is created. The system fails to properly release a device reference, leading to an unbalanced reference...

CVE-2026-64297

A flaw was found in the Linux kernel. An unchecked return value in the moduleextendmaxpages function within the module decompression logic can lead to a null pointer dereference. This vulnerability can be triggered if memory allocation fails during module loading, resulting in a kernel oops. This...

CVE-2026-64482

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Gravis Ultrasound GUS driver. When memory allocation fails, the sndctlnew1 function can return a null value. The sndgf1pcmvolumecontrol function does not properly check for this null return, leading to a null pointer...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_115-default / etc (SUSE-SU-2026:3372-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3372-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues: The following security issues were fixed: -...

The vulnerability of the memfd_alloc_folio() function in the mm/memfd.c module of the Linux kernel’s memory management subsystem allows a hacker to gain unauthorized access to protected information.

The vulnerability of the memfdallocfolio function in the mm/memfd.c module of the Linux kernel’s memory management subsystem is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2026-54638

gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...

td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode

Impact A remote, unauthenticated attacker can cause excessive memory allocation and resulting CPU / GC pressure, potentially OOM termination by sending a crafted unencrypted MTProto packet. proto.UnencryptedMessage.Decode read an attacker-controlled 32-bit dataLen field and immediately allocated ...

EUVD-2026-50085

gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...

CVE-2026-54638 td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode

gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...

CVE-2026-54638

gotd/td, a Go MTProto client, is affected by a pre-auth denial of service in proto.UnencryptedMessage.Decode where dataLen from an unauthenticated MTProto unencrypted packet could trigger unbounded memory allocation before validating the buffer. This could cause excessive memory usage and CPU/GC ...

CVE-2026-54638 td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode

gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...

CVE-2026-15057

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

CVE-2026-14981 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits...