14755 matches found
python-pillow: Pillow: Denial of Service via crafted PCF font data
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primar...
python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files
A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...
Linux Distros Unpatched Vulnerability : CVE-2026-59088
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect...
Linux Distros Unpatched Vulnerability : CVE-2026-68425
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing starts reassembly for active DATA responses before the response i...
Linux Distros Unpatched Vulnerability : CVE-2026-66485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based ...
Linux Distros Unpatched Vulnerability : CVE-2026-12570
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the...
CVE-2026-44630: Memory Allocation with Excessive Size Value
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError. Thi...
PT-2026-69334
Name of the Vulnerable Software and Affected Versions keras-team/keras versions prior to 3.15.1 Description A denial of service DoS issue occurs when loading malicious .keras model files using the keras.models.load model function. The H5IOStore. getitem method in keras/src/saving/saving lib.py...
CVE-2026-12570: Allocation of Resources Without Limits or Throttling
A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...
PT-2026-69599
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the ath6kl wifi driver. The function aggr recv addba req evt fails to return when the firmware-supplied win sz variable is outside the valid range...
SUSE-SU-2026:3535-1 Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:3534-1 Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:3533-1 Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:23172-1 Security update for openssl-3
This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
Memory Allocation with Excessive Size Value
Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the parsing of the /ToUnicode entry of a font with unusually large values. An...
JLSEC-2026-1183 FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption...
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...
SUSE-SU-2026:23058-1 Security update for openssl-3
This update for openssl-3 fixes the following issue: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
Exploit for CVE-2026-70638
CVE-2026-70638 - llama.cpp LLaMA-Android JNI Integer Overflow...
UBUNTU-CVE-2026-18938
A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...
