CVE-2026-65576

creationtimestamp| type| source ---|---|--- 2026-08-06 16:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfxnnuia22...

libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...

CVE-2026-43630 llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

CVE-2026-43630 llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

CVE-2026-43630 llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

CVE-2026-5134

creationtimestamp| type| source ---|---|--- 2026-08-06 14:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgbm4uoar2l...

CVE-2026-66733 Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2026-66733

Sonic 3 A.I.R. is affected by an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() prior to commit 2492d18. The mUniquePacketID field is read directly from the UDP wire-format header without bounds checking, causing the server to allocate one CacheItem per missing ...

CVE-2026-11983

creationtimestamp| type| source ---|---|--- 2026-08-06 12:34:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e37ljvdasqskv...

CVE-2026-65583 Apache CXF: Self-issued ID token claims validation skipped

Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks issuer/subject/audience/time and subjwk binding, enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in...

CVE-2026-18325

creationtimestamp| type| source ---|---|--- 2026-08-06 08:55:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msfob5fryx2g 2026-08-06 22:15:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msh2wervyf24...

ROOT-OS-DEBIAN-12-CVE-2025-71233 CVE-2025-71233 in linux - Patched by Root

Root has patched CVE-2025-71233 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53074 CVE-2026-53074 in linux - Patched by Root

Root has patched CVE-2026-53074 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31617 CVE-2026-31617 in linux - Patched by Root

Root has patched CVE-2026-31617 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68259 CVE-2025-68259 in linux - Patched by Root

Root has patched CVE-2025-68259 in the linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-64454

creationtimestamp| type| source ---|---|--- 2026-08-06 04:52:23+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-63814

creationtimestamp| type| source ---|---|--- 2026-08-06 04:47:03+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2025-58486

creationtimestamp| type| source ---|---|--- 2026-08-06 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117046681751967940...

CVE-2026-18485

creationtimestamp| type| source ---|---|--- 2026-08-06 03:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf2g2vfjh2z...

RLSA-2026:49851 Moderate: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: Rocky Linux8.10 - KVM: s390: Limit...