31241 matches found
PYSEC-2026-3311 TensorFlow vulnerable to `CHECK` fail in `RandomPoissonV2`
Impact When RandomPoissonV2 receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536 arg1=tf.random.uniformshape=4, 4, 4, 4, 4, dtype=tf.float32, maxval=None...
PYSEC-2026-3252 TensorFlow vulnerable to `CHECK` fail in `DenseBincount`
Impact DenseBincount assumes its input tensor weights to either have the same shape as its input tensor input or to be length-0. A different weights shape will trigger a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf binaryoutput = True input =...
PYSEC-2026-3210 TensorFlow vulnerable to assertion fail on MLIR empty edge names
Impact When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it crashes. cpp // We pre-allocate the array of operands and populate it using the // outputnametoposition and controloutputtoposition populated // previously. SmallVector retvalsfunc.retsize +...
PYSEC-2026-3215 TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`
Impact The AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program. python import tensorflow as tf import numpy as np value = np.ones1, 1, 1, 1 ksize = 1, 1e20, 1, 1 strides = 1, 1, 1, 1 padding = 'SAM...
EUVD-2026-43313
Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to validate the length and content of message attachment field values, which allows an authenticated attacker to cause a denial of service for all users in a channel via a post containing a specially crafted payload tha...
CVE-2026-9708 Incoming webhook user attribution via unvalidated webhook owner
Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to validate that an assigned incoming webhook user has access to the target team or channel, which allows a requester with webhook management permissions to create posts or direct messages attributed to another user via...
The vulnerability of the gnutls_pkcs11_token_set_pin() function in the lib/pkcs11_write.c file of the GnuTLS cryptographic library allows a attacker to cause a service failure.
The vulnerability of the gnutlspkcs11tokensetpin function in the lib/pkcs11write.c file of the GnuTLS cryptographic library is related to a buffer out-of-bounds exception due to a pointer that has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260713-73-0044
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260713-73-0056
The vulnerability of the railwindowfree function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260713-73-0035
The vulnerability in Python-Relenv relates to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-57837
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11 Linux kernel versions prior to 7.1 Linux kernel versions prior to 6.7 Linux kernel versions prior to 6.18.34 Description A flaw exists in the vsock/virtio component regarding zerocopy completion for...
ROS-20260713-73-0028
The vulnerability of the crc32combine64 and crc32combinegen64 functions in the open-source data compression library zlib relates to the fact that the x2nmodp function may perform right shifts within a loop without a termination condition. Exploiting this vulnerability could allow an attacker to...
ROS-20260713-73-0021
The vulnerability in python-pillow is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260713-73-0018
The vulnerability in python-pillow is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the dlfb ops mmap() function in Linux kernel allows a hacker to cause a service failure.
The vulnerability of the dlfb ops mmap function in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the damon_reclaim_init() function in the mm/damon/reclaim.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the damonreclaiminit function in the mm/damon/reclaim.c module of the Linux kernel’s memory management subsystem is related to improper memory release „memory leak“. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the microprogramming software in the RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000 routing and switching platforms, due to the lack of measures to neutralize special elements, allows a perpetrator to execute arbitrary commands.
The vulnerability of the Scheduler component in the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000 lies in the lack of measures to neutralize specific elements. Exploiting this...
The vulnerability of the DTLS implementation of the GnuTLS cryptographic library allows a attacker to induce a service failure.
The vulnerability of the DTLS protocol implementation of the GnuTLS cryptographic library is related to unpredictable behavior of functions due to inconsistencies in parameter values. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...