Lucene search
+L

24135 matches found

osv_ubuntu
osv_ubuntu
•added 2026/02/10 6:16 p.m.•17 views

UBUNTU-CVE-2026-25646

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6.9AI score0.00718EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2026/02/10 6:16 p.m.•25 views

CVE-2026-25646

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6.9AI score0.00718EPSS
SaveExploits1References6
NVD
NVD
•added 2026/02/10 5:16 p.m.•43 views

CVE-2025-27560

Loop with unreachable exit condition 'infinite loop' for some IntelR Platform within Ring 0: Kernel may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local acces...

6.7CVSS0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/10 5:04 p.m.•76 views

CVE-2026-25646 LIBPNG has a heap buffer overflow in png_set_quantize

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS0.00718EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2026/02/10 5:04 p.m.•34 views

CVE-2026-25646

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6.9AI score0.00718EPSS
SaveExploits1References57
Mend
Mend
•added 2026/02/10 5:04 p.m.•4 views

CVE-2026-25646

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6.9AI score0.00718EPSS
SaveExploits1References60
CVE
CVE
•added 2026/02/10 5:04 p.m.•109 views

CVE-2026-25646

LIBPNG has a bug in the png_set_quantize() API prior to 1.6.55: when called with no histogram and the palette colors exceed twice the display’s maximum, certain palettes can cause an out-of-bounds read that may read past an internal heap buffer, potentially causing an infinite loop. The issue is ...

8.3CVSS6.9AI score0.00718EPSS
SaveExploits1References51Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/10 4:25 p.m.•12 views

CVE-2025-27560

Loop with unreachable exit condition 'infinite loop' for some IntelR Platform within Ring 0: Kernel may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local acces...

6.7CVSS5.8AI score0.00131EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/10 4:25 p.m.•34 views

CVE-2025-27560

CVE-2025-27560 describes an infinite loop in certain Intel Platform components operating in Ring 0, enabling a local privileged user to cause a denial of service with no user interaction. The impact is limited to availability (high) while confidentiality and integrity remain unaffected per the pr...

6.7CVSS5.8AI score0.00131EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/02/10 4:16 a.m.•18 views

CVE-2026-23689

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

7.7CVSS5.9AI score0.00411EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/10 4:16 a.m.•33 views

CVE-2026-23689

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

7.7CVSS0.00411EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/10 3:03 a.m.•62 views

CVE-2026-23689 Denial of service (DOS) in SAP Supply Chain Management

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

7.7CVSS0.00411EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/10 3:03 a.m.•13 views

CVE-2026-23689 Denial of service (DOS) in SAP Supply Chain Management

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

7.7CVSS5.9AI score0.00411EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/10 3:03 a.m.•48 views

CVE-2026-23689

CVE-2026-23689 involves an authenticated attacker with regular user privileges who can access the network to trigger a remote-enabled function module using an excessively large loop-control parameter. This leads to prolonged loop execution and uncontrolled resource consumption, resulting in a den...

7.7CVSS5.9AI score0.00411EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•3 views

CVE-2026-25646: Heap-based Buffer Overflow

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6.9AI score0.00718EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•5 views

CVE-2026-23689: Unchecked Input for Loop Condition

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

7.7CVSS5.9AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/10 12:00 a.m.•37 views

PT-2026-7216

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An authenticated attacker with standard user privileges and network access can cause a denial-of-service condition by repeatedly calling a remotely enabled function module with a very large...

7.7CVSS5.4AI score0.00411EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/02/10 12:00 a.m.•44 views

PT-2026-7293

Name of the Vulnerable Software and Affected Versions IntelR Platform affected versions not specified Description A loop with an unreachable exit condition, potentially leading to an infinite loop, exists within Ring 0 of the kernel on some Intel platforms. This could allow a system software...

6.7CVSS5.3AI score0.00131EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•12 views

CVE-2025-27560: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' for some IntelR Platform within Ring 0: Kernel may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local acces...

6.7CVSS5.8AI score0.00131EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/10 12:00 a.m.•23 views

Intel Xeon 6 Processor 安全漏洞

The Intel Xeon 6 processor is a series of chips developed by the American company Intel. There is a security vulnerability present in the Intel Xeon 6 processor, which stems from an infinite loop and may lead to denial-of-service attacks...

6.7CVSS5.8AI score0.00131EPSS
SaveExploits0References1
Rows per page
Query Builder