CVE-2026-84784

A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS by flooding a connection with connection identifier update requests while withholding acknowledgments. This behavior bypasses connection limits and forces the system to accumulate pending retirement frames, resulting...

CVE-2026-84783

A flaw was found in OpenSSL. A remote, unauthenticated attacker can cause a Denial of Service DoS by initiating concurrent connections to a multi-threaded Transport Layer Security TLS client or server verifying certificates. Due to improper synchronization when multiple threads simultaneously...

CVE-2026-75806

A flaw was found in OpenSSL. A remote, unauthenticated attacker can cause a Denial of Service DoS by terminating an active Datagram Transport Layer Security DTLS session. By sending an undersized network packet that is shorter than the expected cryptographic overhead, the record processing layer...

CVE-2026-42772

A flaw was found in OpenSSL. A remote attacker who establishes a QUIC network connection can cause a Denial of Service DoS by sending specially sequenced, out-of-order stream frames. Because the stream reassembly mechanism handles non-sequential data fragments inefficiently, processing these fram...

EUVD-2026-89109

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102808

PX4 Autopilot versions through 1.17.0 are vulnerable to a NULL pointer dereference within the sd_stress command. The root cause is the lack of validation for the -b byte count parameter before it is processed by malloc() and memset(). An attacker with shell access, which can be obtained via MAVLi...

CVE-2026-97621

A flaw was found in the Linux kernel's Rockchip Analogix DP driver. The driver formats a device tree path into a fixed-size stack buffer without verifying the input length. A local user capable of providing an excessively long device tree path can trigger a stack-based buffer overflow, leading to...

CVE-2026-102634

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

AZL-105537 CVE-2026-102623 affecting package kubevirt 1.8.4-2

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw in KubeVirt allows an authenticated user with permissions to create Virtual Machine Instances (VMIs) to trigger a Denial of Service (DoS) . The vulnerability exists because the virt-controller component fails to properly validate volume configurations, specifically when a virtual machine d...

CVE-2026-97444

A flaw was found in the Linux kernel. Missing boundary checks within the ACPICA ACPI Component Architecture subsystem allow out-of-bounds memory access when parsing ACPI bytecode. An attacker capable of supplying malformed ACPI tables can trigger this vulnerability, leading to a kernel crash and ...

CVE-2026-97689

A flaw was found in urllib3. This flaw allows a Denial of Service DoS through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application...

USN-8846-1 libheif vulnerabilities

Yuqi Qiu and Xiang Li discovered that libheif incorrectly handled certain compressed metadata. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-84384 Yuqi Qiu and Xiang Li discovered that libheif...

AZL-105660 CVE-2026-97689 affecting package python-urllib3 2.0.7-6

urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a...

AZL-105915 CVE-2026-97689 affecting package tensorflow 2.16.1-11

urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a...

AZL-105879 CVE-2026-84784 affecting package rust 1.96.1-2

Issue summary: A malicious remote peer may flood the local QUIC stack with NEWCONNECTIONID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRECONNID frame for every NEWCONNECTIONID frame it receives. The...

AZL-105585 CVE-2026-84784 affecting package openssl 3.3.7-6

Issue summary: A malicious remote peer may flood the local QUIC stack with NEWCONNECTIONID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRECONNID frame for every NEWCONNECTIONID frame it receives. The...

DEBIAN-CVE-2026-84784

Issue summary: A malicious remote peer may flood the local QUIC stack with NEWCONNECTIONID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRECONNID frame for every NEWCONNECTIONID frame it receives. The...