DEBIAN-CVE-2026-34517

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, for some multipart form fields, aiohttp read the entire field into memory before checking clientmaxsize. This issue has been patched in version 3.13.4...

PYSEC-2026-2094

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could cause uncapped memory usage. This issue has been patched in version 3.13.4...

The vulnerability of the rockchip_usb2phy_probe() function in the drivers/phy/rockchip/phy-rockchip-inno-usb2.c driver module of the Linux operating system’s kernel, which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rockchipusb2phyprobe function in the drivers/phy/rockchip/phy-rockchip-inno-usb2.c driver module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The software for designing and configuring electrical systems of Schneider Electric EcoStruxure Power Build Rapsody is vulnerable due to the use of memory after it is released. This vulnerability allows a attacker to execute arbitrary code.

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for designing and configuring electrical systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created SSD file...

The vulnerability in the `realtek_mdio_probe()` function of the `drivers/net/dsa/realtek/realtek-mdio.c` driver of the Linux kernel’s DSA core allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the realtekmdioprobe function in the driver/net/dsa/realtek/realtek-mdio.c file of the Linux kernel’s DSA driver is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the tmc_etr_get_sysfs_buffer() function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux kernel’s hardware tracing driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tmcetrgetsysfsbuffer function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux kernel’s hardware tracing driver is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the...

Vulnerability of the freerdp_bitmap_decompress_planar() function in the RDP client FreeRDP, allowing a hacker to trigger a service failure

The vulnerability of the freerdpbitmapdecompressplanar function in the RDP client FreeRDP is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Chrome FedCM Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome FedCM, which can be exploited by an attacker to execute arbitrary code on a system...

The vulnerability in the function ath9k_htc_probe_device() of the drivers/net/wireless/ath/ath9k/htc_drv_init.c file, a driver for Atheros/Qualcomm wireless adapter devices in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath9khtcprobedevice function in the drivers/net/wireless/ath/ath9k/htcdrvinit.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the reutilization of previously freed memory due to incorrect initialization. Exploiting this...

The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ntfs_security_init() function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfssecurityinit function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Quantifying Memory Cells Vulnerability for DRAM Security

Dynamic Random Access Memory DRAM is pervasive in computer systems. Cell vulnerabilities caused by unintended phenomena forced retention failure, latency alteration, rowhammer and rowpress lead to unintended bit flips in memory. These phenomena have been explored as attacks to violate data...

CVE-2026-31962 HTSlib CRAM reader has heap buffer overflow due to improper validation of input

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While most alignment records store DNA sequence and quality values, the format also allows them to omit this data in certain cases to save space. Due to...

Security update for xen

This update for xen fixes the following issues: CVE-2026-23554: xen: Use after free of paging structures in EPT bsc1259247, XSA-480 CVE-2026-23555: xen: Xenstored DoS by unprivileged domain bsc1259248, XSA-481 Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Google Chrome WebMIDI Memory Misreference Vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome WebMIDI suffers from a use-after-free vulnerability that originates from re-referencing or using freed memory, which can be exploited by remote attackers to execute arbitrary code...

UBUNTU-CVE-2026-2920

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

Advisory ROSA-SA-2026-3207

software: libxslt 1.1.43 OS: ROSA-CHROME unaffected versions = libxslt-1.1.43-1 affected versions libxslt-1.1.43-1 CVE-ID: CVE-2024-55549 BDU-ID: 2025-03641 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the xsltGetInheritedNsList function of the libxslt library is related to memory usage after it...

CVE-2026-28521 arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure

arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component. An attacker who hijacks or controls the Tuya cloud service can issue malicious DP event data to victim devices, causing out-of-bounds memory access that may result in information...

The vulnerability of the print spooler driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Print Spooler in operating systems related to printing vulnerabilities involve the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...