CVE-2026-125073

FFmpeg versions through 9.0.2 are susceptible to an infinite loop vulnerability located in the bit_allocation() function within libavcodec/imc.c. An attacker can trigger this by providing audio blocks with a negative bit budget , which drives the freebits value negative. This causes the reduction...

CVE-2026-119079

The MIT Kerberos 5 (krb5) library (version 1.11 and later ) contains a vulnerability in the decode_sequence_of() function within lib/krb5/asn.1/asn1_encode.c. The issue stems from the function growing the decoded element array one entry at a time, which leads to quadratic complexity during decodi...

CVE-2026-119079 Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decoding

decodesequenceof in lib/krb5/asn.1/asn1encode.c in MIT Kerberos 5 aka krb5 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service CPU consumption in the KDC by sending an unauthenticated AS-REQ or TGS-REQ with a large number ...

CVE-2026-112322

cleanclient in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service CPU consumption in kadmind by accumulating a large number of AUTHGSSAPI client...

CVE-2026-112322 Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanup

cleanclient in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service CPU consumption in kadmind by accumulating a large number of AUTHGSSAPI client...

CVE-2026-112322

The MIT Kerberos 5 (krb5) library is vulnerable to a denial of service (DoS) attack due to an inefficient scanning mechanism in the clean_client() function located in lib/rpc/svc_auth_gssapi.c. After each removal, the function restarts its scan from the head of the client list, resulting in a qua...

CVE-2026-112322

cleanclient in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service CPU consumption in kadmind by accumulating a large number of AUTHGSSAPI client...

EUVD-2026-120150

A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base. While sanitizing inline subtitle markup, the parser repeatedly searches the remaining text with unanchored regular expressions. A crafted subtitle cue with a long line of unmatched markup-like text can force...

net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames

A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service DoS by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration SETTINGS frames that...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

net/http: golang: golang: Denial of Service via crafted HTTP Range headers

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service DoS by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU...

PT-2026-141092

FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parse frame header in libavcodec/jpegxl parser.c that fails to validate TOC entry counts against remaining input. Attackers can supply a crafted JPEG XL frame header with a permuted TOC and huge toc count, making...

Hidden in Plain Sight: Privacy-Enhanced Computing through Register Renaming

Privacy-Enhanced Computing PEC is a mechanism to hide program secrets from the outside world without paying the cost of fully-homomorphic encryption. Previous work has developed hardware mechanisms to achieve this goal but they require a dedicated processor enclave where all computations are done...

CVE-2026-125040: Red Hat: A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base

A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base. While sanitizing inline subtitle markup, the parser repeatedly searches the remaining text with unanchored regular expressions. A crafted subtitle cue with a long line of unmatched markup-like text can force...

CVE-2026-125073: FFmpeg: FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit_allocation() in libavcodec/imc.c that allows…

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

CVE-2026-125264: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parse_frame_header() in…

FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parseframeheader in libavcodec/jpegxlparser.c that fails to validate TOC entry counts against remaining input. Attackers can supply a crafted JPEG XL frame header with a permuted TOC and huge toccount, making the...

PT-2026-140961

clean client in lib/rpc/svc auth gssapi.c in MIT Kerberos 5 aka krb5 restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service CPU consumption in kadmind by accumulating a large number of AUTH GSSAPI clie...

PT-2026-141052

FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbis parser.c that re-parses invalid extradata for every packet when valid extradata remains false. Attackers can supply crafted Ogg or Matroska Vorbis streams with large invalid extradata and many packets to exhaust...

CVE-2026-124553

BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to exhaust CPU and memory by supplying unbounded bfrange and cidrange spans. Attackers can submit a crafted PDF whose embedded ToUnicode CMap declares a huge range, driving billions of loop...

CVE-2026-124553 BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsing

BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to exhaust CPU and memory by supplying unbounded bfrange and cidrange spans. Attackers can submit a crafted PDF whose embedded ToUnicode CMap declares a huge range, driving billions of loop...