Datadog ddtrace resource management error vulnerability

Datadog DDTrace versions from 1.5.0 up to 3.19.9 and from 4.0.0 up to 4.15.6 contain a resource management error vulnerability. This vulnerability arises from an excessive backtracking when the default query string is processed by regular expressions; it can allow remote attackers to cause...

Go JOSE input validation error vulnerability

Versions of Go JOSE prior to 4.1.5 contain an input validation error vulnerability. This vulnerability arises when, during decryption of untrusted JWE ciphertexts using algorithms such as A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512, an empty ciphertext buffer is passed to the CBC-HMAC componen...

Yoosee gm8135s camera resource management error vulnerability

The Yoosee gm8135s camera running version 21.00.01.36 contains a resource management error vulnerability. This vulnerability stems from improper initialization of an unknown function within the file wpasupplicantX.conf in the WiFi Configuration component, potentially allowing local network...

Tiger Data pgvectorscale buffer error vulnerability

Versions of Tiger Data pgvectorscale prior to 0.9.1 contain a buffer error vulnerability stemming from type confusion. Low-privilege database users possessing CREATE privileges on the vectorscale schema can bypass pgvector’s vector types or operators by pre-creating shadow objects. This allows th...

Apple iOS buffer error vulnerability

Buffer error vulnerabilities exist in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe...

Apple iOS buffer error vulnerability

Buffer error vulnerabilities exist in Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, and Apple visionOS versions...

Asterisk resource management error vulnerability

Versions prior to Asterisk 20.20.1, 21.12.3, 22.10.1, and 23.4.1, as well as Certified Asterisk versions prior to 20.7-cert11 and 22.8-cert3, contain a resource management error vulnerability. This vulnerability arises when an authenticated attacker sends a SIP INVITE over a connection-oriented...

Mozilla Firefox for iOS processing logic error vulnerability

Mozilla Firefox for iOS contains a processing logic error vulnerability. This vulnerability allows malicious web pages to insert arbitrary text into FaceTime call prompts displayed on iOS, potentially leading to the display of phishing messages within the system interface...

Christian Garbs gbsplay buffer error vulnerability

Versions 0.0.103 and earlier of Christian Garbs’ gbsplay contain a buffer error vulnerability. This vulnerability stems from the gbropen function in gbs.c failing to validate file length prior to scanning the GBR ROM title field. As a result, it may lead to heap-based out-of-bounds reads. Attacke...

David Anderson libdwarf buffer error vulnerability

David Anderson: Libdwarf versions 2.3.3 and earlier contain a buffer error vulnerability. This vulnerability arises because the dwarfdebugaddrtable function omits the table’s starting offset when validating the length of the .debugaddr element, potentially leading to heap-based out-of-bounds read...

Apple iOS input validation error vulnerability

A input validation error vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple...

Mattermost resource management error vulnerability

Versions 11.9.1 and earlier of Mattermost, as well as versions 11.8.5 and earlier, 11.7.10 and earlier, and 11.10.1 and earlier are affected by a resource management error vulnerability. This vulnerability arises because the WebSocket msgpack decoder fails to enforce allocation limits on byte...

Omega Solution Restro POS processing logic error vulnerability

Omega Solution Restro POS versions 20261026 and earlier contain a logic error vulnerability. This vulnerability stems from improper handling of the productUnitSalePrice parameter in the /sale-invoice/ file, potentially leading to incorrect business logic execution. Attackers can exploit this flaw...

GStreamer processing logic error vulnerability

Versions of GStreamer Editing Services prior to 1.28.8 contain a logic error vulnerability. This vulnerability arises because GES project files can embed arbitrary GStreamer pipeline descriptions as effect definitions. During loading, there is no restriction on the elements and attributes that ca...

Python Social Auth - Core input validation error vulnerability

Python Social Auth versions prior to Core 6.2.0 contain a security vulnerability. This vulnerability arises because OpenIdConnectAuth stores the OpenID Connect nonce in a shared OpenIdConnectAssociation table. It only verifies that the nonce exists and has not expired; it fails to bind this nonce...

OpenHands Software Agent SDK configuration error vulnerability

Versions prior to OpenHands Software Agent SDK 1.52.0 contain a configuration error vulnerability. This vulnerability arises because DockerWorkspace and Apptainer workspace starters bind the sandbox proxy server to all network interfaces, and since sessionapikeys is set to an empty value,...

2K Games Civilization V buffer error vulnerability

Version 1.0.3.144 of Civilization V by 2K Games contains a buffer error vulnerability. This vulnerability stems from a type confusion in the loadstring function within the Lua Sandbox component, potentially allowing remote attackers to perform malicious actions...

Apple iOS buffer error vulnerability

Buffer error vulnerabilities exist in Apple iOS versions prior to 26.7.2, iOS versions prior to 27.2, iPadOS versions prior to 26.7.2, iPadOS versions prior to 27.2, and Apple visionOS versions prior to 27.2. These vulnerabilities stem from improper boundary checks and may lead to out-of-bounds...

Mozilla Firefox for iOS processing logic error vulnerability

Mozilla Firefox for iOS versions prior to 156.1 contain a logic error vulnerability. This vulnerability arises because malicious web pages can open tel links within windows displaying other websites, causing phone call notifications to appear as if they were initiated by those websites...

Fedora 46 : ags (2026-1664c569e1)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1664c569e1 advisory. Automatic update for ags-3.6.2.22-1.fc46. Changelog Mon Oct 26 2026 Dominik Mierzejewski - 3.6.2.22-1 - update to 3.6.2.22 resolves rhbz2558938 - backport...