16378 matches found
Infinite loop on invalid input in golang.org/x/text
...
CVE-2026-64409: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix infinite loop in btmtksdiotxrxwork Every once in a while we see a hung btmtksdioflush task: INFO: task kworker/u17:0:189 blocked for more than 122 seconds. cancelworktimer+0x3f4/0x460...
CVE-2026-64290: Loop with Unreachable Exit Condition
In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufdfaultfopsread On a copytouser failure inside the inner listforeachentry, only the inner loop breaks; the outer while re-fetches the just-restored fault group and retries the failing...
Linux Distros Unpatched Vulnerability : CVE-2026-64409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix infinite loop in btmtksdiotxrxwork Every once in a while we see a...
CVE-2026-64474: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
PT-2026-64630
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the btmtksdio txrx work function contains an incorrect implementation of the time is before jiffies check. This logic error causes the lo...
Linux Distros Unpatched Vulnerability : CVE-2026-56852
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2026-64611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID...
Linux Distros Unpatched Vulnerability : CVE-2026-64834
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to...
CVE-2026-64519: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation findonesbstid skips stids whose scstatus is non-zero, but the SCTYPELAYOUT case in nfsd4revokestates never sets scstatus before calling nfsd4closelayout. The retry loop therefore...
GO-2026-5490 Go-billy: Symlink resolution lack of cycle detection leads to infinite loop in github.com/go-git/go-billy
Go-billy: Symlink resolution lack of cycle detection leads to infinite loop in github.com/go-git/go-billy...
K000162380: XPath vulnerability CVE-2026-32287
Security Advisory Description Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true". CVE-2026-32287 Impact A local, unauthenticated attacker can exploit the...
GHSA-QHMF-7FC4-8Q3H ImageMagick: Infinite Loop in connected-components when providing invalid arguments
When providing invalid arguments to the connected-components option an infinite loop will occur...
EUVD-2026-41123
ImageMagick: Infinite Loop in connected-components when providing invalid arguments...
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
When providing invalid arguments to the connected-components option an infinite loop will occur...
OPENSUSE-SU-2026:21441-1 Security update for distribution
This update for distribution fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266629. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...
openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21395-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21395-1 advisory. This update for trivy fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels...
Security update for helm (important)
openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21422-1 Rating: important References: bsc1266598 bsc1271997 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821 SUSE : 7.4...
GHSA-G867-7843-WF8Q pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters. Patches This...