CVE-2026-72645: Memory Allocation with Excessive Size Value

Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user holding only read privileges on a single index can submit one small, specially crafted search request that causes an excessively large memor...

PT-2026-76038

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

CVE-2026-56860: Inefficient Algorithmic Complexity

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

CVE-2026-72656: Memory Allocation with Excessive Size Value

Memory Allocation with Excessive Size Value CWE-789 in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user able to submit ES|QL queries could send a specially crafted query whose evaluation allocates an unbounded amou...

PT-2026-71898

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Resolving relative paths containing parent directory '..' segments previously performed string conversions and buffer rewrites at each step. This process resulte...

CVE-2026-52050

precomputeslidewindow NULL deref on OOM / morecomps NULL deref after failed calloc / biinitialize / alloc NULL deref on OOM...

PT-2026-71793

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description An authenticated user with read privileges can trigger a denial of service by submitting a small search request containing crafted input. This input causes an internal component to...

PT-2026-71761

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description An authenticated user with read privileges on a single index can trigger a denial of service by submitting a specially crafted search request. This action causes an excessively large...

netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted LZ4 compressed data stream. This can cause the Lz4FrameDecoder to allocate a large amount of memory up to 32 MB per block before...

CVE-2026-68436

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability occurs when the struct dc data structure, which is used for display management, grows beyond a certain memory allocation limit. When this limit is exceeded, the system fails to allocate the necessary memory,...

EUVD-2026-57062

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

DEBIAN-CVE-2026-68436

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time most of it the two inlined dcscratchspace copies and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its actual siz...

CVE-2026-68436

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time most of it the two inlined dcscratchspace copies and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its actual siz...

CVE-2026-68436

The CVE-2026-68436 issue affects the Linux kernel DRM for AMD display: the in-kernel struct dc can grow beyond the 4 MiB contiguous allocation limit, causing dc_create() to fail when allocated with kzalloc(). The fix replaces kzalloc() with kvzalloc() (and kvfree()) so allocation can fall back to...

CVE-2026-68436

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time most of it the two inlined dcscratchspace copies and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its actual siz...

Linux Distros Unpatched Vulnerability : CVE-2026-68208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devmkzalloc in vipprobeslice In vipprobeslice, the err...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-53451)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53451 advisory. 1.26.7-2.3 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay CVE-2026-18649 Resolves: RHEL-224158...

ROS-20260812-73-0016

The vulnerability in dnsdist is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

HTTP/2 Bomb CVE-2026-49975

...

Linux Distros Unpatched Vulnerability : CVE-2026-68436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time most of it the two inlined dcscratchspace copies and now sits close to t...