EUVD-2026-119252

A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launchgoal of the file imclient/communication/communicationlayer.py of the component Collaboration Layer. Performing a manipulation of the argument maxturns results...

CVE-2026-123964

A vulnerability exists in the Collaboration Layer of OpenBMB Internet of Agents (versions up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a). Specifically, a manipulation of the max_turns argument within the launch_goal function of im_client/communication/communication_layer.py can trigger an infini...

CVE-2026-123785

Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...

CVE-2026-123785

Fluxbox versions through 1.3.7 are vulnerable to an infinite loop within the Menu::updateMenu() function located in src/FbTk/Menu.cc. An attacker can cause a denial of service (DoS) at startup by providing crafted style geometry values, specifically an oversized and unbounded menu.titleHeight. Th...

EUVD-2026-118303

Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...

CVE-2026-123785 Fluxbox through 1.3.7 Infinite Loop via Menu::updateMenu() Style Geometry

Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...

CVE-2026-122054

A flaw was found in glibc. When converting crafted text using the BIG-HKSCS character set, such as through the iconv library function, the conversion routine can fail to advance and enter an infinite loop. A remote attacker could exploit this vulnerability by submitting malicious input to an...

CVE-2026-123273

A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by submitting a specially crafted Scalable Vector Graphics SVG image. Due to improper validation of pixel cache dimensions during decoding, the application enters an infinite loop while processing the image. This...

CVE-2026-118488

A flaw was found in the Eclipse Vert.x Redis client. A malicious server can cause a Denial of Service DoS by sending unbounded data or malformed Redis Serialization Protocol RESP responses. Due to missing input size limits and improper parsing of incomplete response terminators, the client can...

CVE-2026-121261

A flaw was found in phpMyAdmin ShapeFile. A remote attacker could exploit this vulnerability by providing a specially crafted shapefile for processing. When parsed by the ShapeRecord::loadFromFile function, the malicious input triggers an infinite loop, leading to excessive resource consumption a...

CVE-2026-97705

A flaw was found in Moleculer. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a malformed network packet with a negative length value to an exposed TCP Transmission Control Protocol transporter. This input triggers an infinite loop that blocks the application even...

UBUNTU-CVE-2026-123273

ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing...

CVE-2026-123785: fluxbox: Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu() in src/FbTk/Menu.cc that allows…

Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...

CVE-2026-97370

A flaw was found in Junrar. The RAR virtual machine RarVM fails to properly enforce execution limits when handling jump instructions that target addresses beyond the program boundaries. A remote attacker could provide a specially crafted RAR archive to force the extraction process into an infinit...

CVE-2026-65628

A flaw was found in jose. This flaw allows an attacker to cause a Denial of Service DoS by triggering an infinite loop during cryptographic key derivation. When deriving a shared secret, passing two JSON Web Keys JWKs with mismatched key types causes the sharedsecret function to enter unbounded...

pillow: pillow: Denial of Service via infinite loop during PDF page rewriting

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS through an infinite loop during PDF page processing. When rewriting pages, the parser fails to detect circular references in the page tree hierarchy. By submitting a specially crafted PDF...

pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted Microsoft Image Composer MIC file. When an application attempts to count or extract frames from the malicious image, an improper state reset triggers an infini...

pillow: pillow: Denial of Service via infinite loop during PDF page rewriting

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS through an infinite loop during PDF page processing. When rewriting pages, the parser fails to detect circular references in the page tree hierarchy. By submitting a specially crafted PDF...

pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted Microsoft Image Composer MIC file. When an application attempts to count or extract frames from the malicious image, an improper state reset triggers an infini...

pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted Microsoft Image Composer MIC file. When an application attempts to count or extract frames from the malicious image, an improper state reset triggers an infini...