1936 matches found
CVE-2026-87825
zstd-jni versions 1.3.8-4 through 1.5.7-13 contain a use-after-free vulnerability in compression and decompression dictionaries. The root cause is that streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Subs...
CVE-2026-87825 zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...
CVE-2026-87825 zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...
EUVD-2026-75023
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to the ZstdDictCompressbyte dict, int offset, int length, int level constructor in ZstdDictCompress.java. An attacker can trigger a native heap read, crash the JVM, or leak adjacent memory by supplying a negative...
CVE-2026-87825: Use After Free
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...
Linux Distros Unpatched Vulnerability : CVE-2026-87825
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing...
CVE-2026-80892 erofs: cap LZMA stream pool size
In the Linux kernel, the following vulnerability has been resolved: erofs: cap LZMA stream pool size fs/erofs/decompressorlzma.c sizes the module-global MicroLZMA stream pool from numpossiblecpus when the lzmastreams module parameter is unset, then zerofsloadlzmaconfig preallocates one...
CVE-2026-82367
Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved and then...
EUVD-2026-68283
Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved and then...
CVE-2026-82367 Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic
Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved and then...
CVE-2026-82367 Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic
Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved and then...
EEF-CVE-2026-82367 Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic
Summary Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved...
CVE-2026-82367
CVE-2026-82367 is a re-entrant data-exposure bug in ash_graphql (ash-project), affecting versions 1.4.0 through before 1.11.0 . The root cause lies in AshGraphql.Subscription.Batcher.do_send/5, which reads and deletes the process-dictionary key :batch_resolved without namespacing it per run. On t...
PT-2026-83628
Name of the Vulnerable Software and Affected Versions ash graphql versions 1.4.0 through 1.10.x Description An issue exists where resolved records from one subscription may be delivered to a different subscriber's topic. This occurs because the do send/5 function in AshGraphql.Subscription.Batche...
EUVD-2026-66245
CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file...
Multiple vulnerabilities in CorvusSKK
Overview CorvusSKK provided by SASAKI Nobuyuki contains multiple vulnerabilities listed below: Code Injection CWE-94 - CVE-2026-76148 Integer Overflow or Wraparound CWE-190 - CVE-2026-76149 Ryo Shimada of Powder Keg Technologies, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with...
CVE-2026-76149
CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file...