CVE-2026-23044

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When cryptoallocacomp fails, it returns an ERRPTR value, not NULL. The cleanup code in savecompressedimage and loadcompressedimage unconditionally calls...

CVE-2026-23044

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When cryptoallocacomp fails, it returns an ERRPTR value, not NULL. The cleanup code in savecompressedimage and loadcompressedimage unconditionally calls...

CVE-2026-23044

The CVE-2026-23044 issue affects the Linux kernel where hibernate crash occurs if crypto_alloc_acomp() returns an ERR_PTR instead of NULL. The cleanup paths in save_compressed_image() and load_compressed_image() call crypto_free_acomp() unconditionally, dereferencing an invalid pointer in crypto_...

CVE-2026-23044

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When cryptoallocacomp fails, it returns an ERRPTR value, not NULL. The cleanup code in savecompressedimage and loadcompressedimage unconditionally calls...

CVE-2026-23044 PM: hibernate: Fix crash when freeing invalid crypto compressor

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When cryptoallocacomp fails, it returns an ERRPTR value, not NULL. The cleanup code in savecompressedimage and loadcompressedimage unconditionally calls...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an unchecked failure in the compressor’s allocation process. This failure may lead to the release...

CVE-2023-40209

Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0...

CVE-2024-39368

Improper neutralization of special elements used in an SQL command 'SQL Injection' in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

[SECURITY] Fedora 42 Update: perl-Alien-Brotli-0.2.2-11.fc42

This distribution installs the brotli compressor, so that it can be used by other distributions, and provides a way to find the executable...

Unity Linux 20.1070a Security Update: deepin-compressor (UTSA-2025-991249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991249 advisory. deepin-compressor Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this iss...

Unity Linux 20.1070e Security Update: deepin-compressor (UTSA-2025-991246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991246 advisory. deepin-compressor Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this iss...

[SECURITY] Fedora 43 Update: perl-Alien-Brotli-0.2.2-11.fc43

This distribution installs the brotli compressor, so that it can be used by other distributions, and provides a way to find the executable...

CVE-2025-43515

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code...

EUVD-2025-175367

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code...

CVE-2025-43515

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code...

CVE-2025-43515

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code...

CVE-2025-43515

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code...

CVE-2025-43515

CVE-2025-43515 affects Apple Compressor. Concrete details across connected sources confirm that an unauthenticated user on the same network as a Compressor server may execute arbitrary code. The root fix is to refuse external connections by default, implemented in Compressor 4.11.1. References fr...

CVE-2025-43515

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code...

Apple Compressor 安全漏洞

Apple Compressor is a video encoding and transcoding software from Apple USA. A security vulnerability exists in Apple Compressor versions prior to 4.11.1, which stems from an improper default denial of external connections and could lead to the execution of arbitrary code by unauthenticated user...