The vulnerabilities in the functions save_state(), rollback_state(), and rxe_requester() of the drivers/infiniband/sw/rxe/rxe_req.c module of the InfiniBand driver for Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the savestate, rollbackstate, and rxerequester functions in the drivers/infiniband/sw/rxe/rxereq.c module of the InfiniBand driver for Linux operating systems is related to the violation of data format agreements. Exploiting this vulnerability can allow a remote attacker to...

The vulnerability of the cdc_ncm_check_tx_max() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s USB network adapter driver allows a hacker to cause a service failure.

The vulnerability of the cdcncmchecktxmax function in the drivers/net/usb/cdcncm.c module of the Linux network adapter driver framework is related to a violation of the data format agreement. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

PT-2026-81304

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description An issue exists in the CMP response validation where the ossl cmp msg check update function converts a peer-supplied sender distinguished name using X509 NAME oneline and passes it directly a...

Linux Distros Unpatched Vulnerability : CVE-2026-55059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12...

CVE-2026-63073: Use of Externally-Controlled Format String

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

UBUNTU-CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

Untrusted Sender DN Used as Format String in CMP Response Validation

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

Linux Distros Unpatched Vulnerability : CVE-2026-63073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact...

FreeBSD-SA-26:61.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:61.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2026-08-25 Credits:...

UBUNTU-CVE-2026-53532

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

CVE-2026-78430

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

EUVD-2026-65092

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430

CVE-2026-78430 is an OS command injection vulnerability in sworddut mcp-ffmpeg-helper versions 0.1.0, 0.1.1, and 0.2.1. The flaw resides in the handleToolCall function within the Tool Handler component (file src/tools/handlers.ts), where improper manipulation of the format argument allows command...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: cxl/acpi: Fixed a use-after-free in cxlparsecfmws KASAN and KFENCE detected a use-after-free in the CXL driver. This occurs in the cxldecoderadd function’s failure path. KASAN prints the following error: BUG: KASAN:...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fixed a NULL pointer dereference in calctxv4l2initformats. In calctxv4l2initformats, devmkzalloc is assigned to ctx-activefmt, and there is a dereference of it afterward. This could lead to a NULL pointer...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Tracing: It was determined that processstring also allows arrays. To address a common bug where TRACEEVENT’s TPfastassign assigns the address of an allocated string to the ring buffer and then references it in TPPrintk, which can...

The vulnerability of the send_message_to_redis() function in the hiredis_libevent2.c file of the Coturn web server allows a hacker to trigger a denial-of-service attack and expose sensitive information.

The vulnerability of the sendmessagetoredis function in the hiredislibevent2.c file of the Coturn web server is related to insufficient handling of the format string. Exploiting this vulnerability could allow a remote attacker to cause service failures and expose sensitive information...