Apache bRPC buffer error vulnerability

Versions 1.11.0 through 1.17.0 of Apache bRPC contain a buffer error vulnerability. This vulnerability arises because the streaming RPC client fails to validate the size of the returned list of extrastreamids prior to processing StreamSettings responses. It then returns identifiers by using a loc...

Linux Distros Unpatched Vulnerability : CVE-2026-113239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a...

Vaadin Framework resource management error vulnerability

A security vulnerability exists in Vaadin Framework versions 8.16.0 through 8.32.1. It arises because requestEnd reads the v-uiId request parameter outside of the code block responsible for releasing the session lock. Since the value is not a numeric v-uiId, Integer.parseInt throws an exception,...

Pillow buffer error vulnerability

Versions 11.0.0 through 13.0.0 of Pillow contain a buffer error vulnerability. This vulnerability arises because the multi-frame loader reuses unvalidated modes and dimensions from expired ImagingCore native storage when changing the logical mode of subsequent frames and decoding data. Specialize...

Apache bRPC buffer error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a buffer error vulnerability. This vulnerability arises from an out-of-bounds read during URL parsing and case-insensitive header lookup on platforms where plain char is unsigned e.g., ARM64, potentially allowing remote attackers to cause process...

Sentry processing logic error vulnerability

Versions prior to Sentry 9.36.0 through 9.47.2, 10.0.0-alpha.0 through 10.75.2, and 11.0.0-alpha.0 through 11.0.0-rc.1 contain a logic error vulnerability. This vulnerability arises because the webpack integration for @sentry/nextjs bypasses application middleware under the configured tunnelRoute...

Vyper buffer error vulnerability

Vyper versions prior to 0.2.6 contain a buffer error vulnerability stemming from a call stack corruption issue. This results in incorrect function output when complex types containing non-basic members are passed as arguments. When contracts pass multidimensional arrays or structs to internal or...

Vyper buffer error vulnerability

In version 0.1.0b4 of Vyper prior to 0.3.0, there is a buffer error vulnerability. This vulnerability arises when internal function calls occur within tuples or nested calls, causing an incorrect stack top pointer. It may lead to memory corruption, resulting in contracts returning corrupted value...

PHP resource management error vulnerability

Versions prior to PHP 8.2.35, versions prior to PHP 8.3.36, versions prior to PHP 8.4.27, and versions prior to PHP 8.5.12 contain a security vulnerability. This vulnerability arises when longjmp is used to handle an out-of-memory error, causing the current context to exit and terminate requests...

Vyper input validation error vulnerability

Vyper versions prior to 0.3.1 contain an input validation error vulnerability. This stems from the absence of a uint8 type, allowing interface returns declared as uint8—such as ERC20.decimals—to be stored in uint256 variables without boundary checks. Malicious contracts can then return values...

PT-2026-120803

Name of the Vulnerable Software and Affected Versions Django REST framework versions 3.12.0 through 3.18.1 Description The TokenProxy.delete function in rest framework/authtoken/models.py incorrectly uses the proxy's user-id primary key instead of the concrete Token token-string primary key to...

Lovell Fuller sharp buffer error vulnerability

Versions prior to Lovell Fuller Sharp 0.35.4 contain a buffer error vulnerability. This vulnerability stems from the inclusion of the vulnerable libheif dependency; when processing malicious AVIF/HEIF inputs, it triggers a decoding flaw in libheif, potentially leading to remote code execution...

Apache bRPC buffer error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a buffer error vulnerability. This vulnerability arises because the Discovery naming service reply parser fails to validate whether JSON values represent objects before invoking the RapidJSON accessor, which is designed solely for objects. When...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the stream message reassembly path does not limit the cumulative size of fragmented messages upon resending them. Remote attackers can send an infinite stream of resending...

Michelle Tilley TOML Parser for Node.js resource management error vulnerability

Michelle Tilley: Versions of the TOML Parser for Node.js prior to 5.0.1 contain a resource management error vulnerability. This vulnerability arises because the addTableArray function in lib/compiler.js re-scans the entire set of assignedPaths and valueAssignments records for each array table...

Splunk Enterprise resource management error vulnerability

Versions prior to Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, and 9.4.16 contain a resource management error vulnerability. This vulnerability arises because REST API endpoints fail to restrict resource usage when handling response field selections; as a result, users lacking the admin or power...

PT-2026-122479

Уязвимость микропрограммного обеспечения шлюза Cisco Expressway связана с ошибкой обработки исключительных состояний. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Pillow resource management error vulnerability

Versions of Pillow from 11.2.1 up to but not including 13.0.0 contain a resource management error vulnerability. This vulnerability arises because Arrow assumes that image rows are tightly packed and exports them from im-blocks0.ptr. It fails to properly handle row padding or alignment offsets...

Amazon Linux 2023 : device-mapper-persistent-data (ALAS2023-2026-3217)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3217 advisory. Fix RUSTSEC-2026-0190: Unsoundness in Error::downcastmut Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142340 advisory. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving...