Qt resource management error vulnerability

Qt has a resource management error vulnerability stemming from HTTP/2 client support allowing post-free reuse. This may cause client applications running on malicious or compromised HTTP/2 servers to crash, thereby affecting availability...

Red Hat: CVE-2026-98876: kernel: host1x: bus: Fix missing ops null check in error teardown

In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1xdeviceinit, the error teardown paths do not check client-ops before dereferencing it, unlike the forward init paths which correctly guard with 'client-ops &&'. Th...

RHEL 8 : php:7.4 (RHSA-2026:88532)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88532 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...

RHEL 7 : php (RHSA-2026:88693)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:88693 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: fatal error handling retains stale reques...

PT-2026-122447

Impact Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network. This affects the auth code flow. Patches Version 7.1.0 and higher are patched. Workarounds Ensure you pass in only the auth code to to...

PT-2026-121811

JwksTrustStore.Get assigned each parsed key to the function's named return value while refreshing the JWKS cache. When the requested kid was not present, the trailing naked return handed the caller the last key in the JWKS document together with a nil error — a confidently wrong answer instead of...

DJI CrystalSky ZS600C processing logic error vulnerability

Versions DJI CrystalSky ZS600C from 0.3.9.7 through 0.6.6.9 contain a logic error vulnerability. This vulnerability stems from an unrecorded backdoor within the “assistant” daemon running with root privileges. Physical access and USB access allow attackers to send the hard-coded string...

Zephyr Project Zephyr buffer error vulnerability

Versions Zephyr 4.0.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises because the RTIO stream completion callback adxl345processfifosamplescb in drivers/sensor/adi/adxl345/adxl345stream.c fails to write data within the actual buffer size limits. Instead, it queues 6...

Twisted input validation error vulnerability

Versions of Twisted prior to 26.10.0rc1 contain an input validation error vulnerability. This vulnerability stems from the fact that twisted.web.http.HTTPChannel.headerReceived accepts raw carriage returns or line feeds in HTTP header values and splits header lines only on CRLF. This may lead to...

Twisted Matrix Labs Twisted resource management error vulnerability

Versions of Twisted Matrix Labs Twisted prior to 26.10.0rc1 contain a resource management error vulnerability. This vulnerability arises because the twisted.words.xish.domish ExpatElementStream parser fails to limit memory usage for unfinished elements. Unauthenticated remote attackers can exploi...

PT-2026-121846

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the host1x device init function, the error teardown paths fail to verify if client-ops is valid before dereferencing it. This differs from the forward initialization paths, which...

Hive GraphQL-Scalars resource management error vulnerability

Versions 1.24.1 through 2.0.1 of Hive GraphQL-Scalars contain a resource management error vulnerability. This vulnerability stems from the use of vague nested numeric quantifiers in GraphQLPhoneNumber within src/scalars/PhoneNumber.ts. When a phone number value contains a sequence of digits...

Eclipse KeyPont - GOSE input validation error vulnerability

Eclipse KeyPont – Versions 0.7.3 through 0.13.0-rc1 and versions prior to 1.0.0-rc4 of GOSE contain a security vulnerability. This vulnerability arises because the JWS Crit header is parsed but not read, resulting in tokens containing unsupported critical extension parameters being accepted inste...

OpenWRT odhcpd resource management error vulnerability

OpenWRT odhcpd versions prior to 25.12 contain a resource management error vulnerability. This vulnerability arises because the DHCPv6 IA handler retains a first lease pointer for each message; multiple IA options reuse the same Reconfigure authentication key. When adjacent network clients send...

The-40-Thieves obsidian-tc resource management error vulnerability

Versions 1.0.1 through 1.31.4 of The-40-Thieves obsidian-tc contain a security vulnerability. This vulnerability arises because createentity, linkentities, renameentity, unlinkentities, and deleteentity fail to properly preserve ownership of notes when re-generating memory notes via the path...

OpenWRT odhcpd buffer error vulnerability

OpenWRT odhcpd versions prior to 25.12 contain a buffer error vulnerability. This vulnerability arises because the DHCPv6 IA response handler writes data beyond the end of a fixed 512-byte stack buffer named pdbuf when a single DHCPv6 REQUEST contains sufficient IA options. There are two distinct...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 7, 8, 9, and 10 contain a buffer error vulnerability. This vulnerability arises because the IPv6 neighbor discovery handler in the open-iscsi iscsiuio component fails to validate whether packets containing these options are present when accessing link layer addre...

baserproject baserCMS processing logic error vulnerability

Versions prior to 5.3.2 of baserproject baserCMS, as well as versions 5.0.0 and 5.4.0 prior to 5.4.2, contain a security vulnerability. This vulnerability arises because the /bc/api/bc-mail/mailmessages/add/mailContentId.json endpoint fails to enforce authcaptcha settings and does not validate...

Bytecode Alliance wasmtime numerical error vulnerability

A security vulnerability exists in Bytecode Alliance wasmtime versions prior to 36.0.19 and from 37.0.0 up to versions prior to 43.0.0. This vulnerability stems from the bitpacking of SSA value indices by the backend of the Cranelift compiler. When compiling sufficiently large or specially crafte...

Part-DB resource management error vulnerability

Versions prior to Part-DB 2.13.2 contain a resource management error vulnerability. This vulnerability arises when base64-encoded file data is used to upload attachments via the API without applying the same file size validation as in browser uploads. As a result, authenticated users can bypass t...