394 matches found
Security Bulletin: IBM MQ Appliance is affected by an out-of-bounds read vulnerability (CVE-2026-12669)
Summary IBM MQ Appliance has addressed an out-of-bounds read vulnerability that could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data. Vulnerability Details CVEID:CVE-2026-12669 DESCRIPTION: IBM MQ could allow an authenticated attacker ...
CVE-2026-115396
Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesyste...
EUVD-2026-108332
Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesyste...
PT-2026-121574
Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesyste...
CVE-2026-106585
A flaw was found in OpenSSH. A remote attacker can trigger a denial of service DoS or abnormal packet processing by transmitting crafted, highly compressed data to a vulnerable client or server. The application fails to verify that decompressed payloads remain within the maximum permitted packet...
CVE-2026-12669
IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...
CVE-2026-12669 IBM MQ Out-of-bounds Read
IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...
EUVD-2026-104464
IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...
CVE-2026-12669
IBM MQ and IBM MQ Operator are affected by an out-of-bounds read vulnerability. An authenticated attacker can trigger this minor error by sending malformed compressed data . While the request is ultimately rejected, the underlying cause is a buffer error during data processing. The affected IBM M...
CVE-2026-12669 IBM MQ Out-of-bounds Read
IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...
PT-2026-117513
IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...
CVE-2026-12669: Out-of-bounds Read
IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...
IBM MQ Operator buffer error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error vulnerability. This...
CVE-2026-97334
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...
EUVD-2026-98764
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...
PT-2026-111614
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libpng vulnerability (USN-8899-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8899-1 advisory. Ze Sheng discovered that libpng incorrectly handled certain compressed data chunks in PNG files. An...
ROS-20261012-73-0043
The vulnerability of the cgroupmigrateaddtask function in the kernel/cgroup/cgroup.c module of the Linux operating system is related to incorrect handling of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-105826
A security policy bypass exists in the ImageMagick MAT decoder in versions before 6.9.13-55 and 7.x before 7.1.2-30 . A remote attacker can submit a specially crafted MAT image containing highly compressed data that causes the decoder to fail to enforce configured temporary file size limits. This...
