14763 matches found
FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing
A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol RDP Enhanced Input RDPEI server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory,...
CVE-2026-90389
CVE-2026-90389 is a bug in the Linux kernel md (multiple device) subsystem . The root cause is that a memalloc_noio_save() token is stored in mddev->noio_flags, allowing one task to save the token and another task to restore it . With concurrent sysfs writes to suspend_lo and suspend_hi, task ...
CVE-2026-25281
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...
CVE-2026-25278
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...
CVE-2026-25281
CVE-2026-25281 is an Allocation of Resources Without Limits or Throttling vulnerability in Qualcomm OOBM (Out-Of-Band Management). The root cause is insufficient memory allocation validation when processing large or numerous request buffers, leading to a transient denial of service . The CVSS 3.1...
EUVD-2026-81328
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...
PT-2026-94147
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A transient Denial of Service DoS occurs due to insufficient memory allocation validation when processing large or numerous request buffers. This issue can lead ...
PT-2026-94644
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cpufreq imx6q driver where imx6 soc volt is allocated using devm kcalloc against the CPU device obtained from get cpu device0. Because this CPU device is never...
CVE-2026-90337: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registered serialcoreaddoneport allocates uport-ttygroups after uartconfigureport, which may register the console. If the allocation fails, the driver unwinds the po...
CVE-2026-93056: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...
PT-2026-94471
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the irqchip/ast2700-intc component where the irq domain activate callback is called from setup irq while desc-lock is held and interrupts are disabled. The functions...
CVE-2026-93307: Memory Allocation with Excessive Size Value
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...
PT-2026-95147
Name of the Vulnerable Software and Affected Versions O-RAN-SC SMO OAM version 2025-06-10 Description A remote issue exists within the VES Collector component where manipulation of the additionalFields.padding argument leads to uncontrolled memory allocation. Recommendations At the moment, there ...
GO-2026-6453 Unbounded memory allocation via streaming row reader in github.com/xuri/excelize
In github.com/xuri/excelize/v2, the streaming worksheet reader used by Rows and GetRows does not enforce the maximum row limit TotalRows on row "r" attributes. A crafted spreadsheet with an out-of-bounds row index causes GetRows to allocate empty row slices up to the specified row number, leading...
ROS-20260916-73-0077
The vulnerability of the nfconncount module in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
rabbitmq-server: rabbitmq-server: Denial of Service via excessive memory allocation in stream management
A flaw was found in rabbitmq-server. An authenticated user with access to a virtual host can cause a Denial of Service DoS by sending a specially crafted HTTP request to the stream management application programming interface API. The server allocates substantial memory to process stream binding...
Security Bulletin: IBM Sterling Global Availability Mailbox is affected by vulnerabilities in bouncy castle
Summary Bouncy Castle for Java before 1.85 was affected with the following CVE's.CVE-2026-12185, CVE-2026-12803, CVE-2026-12816, CVE-2026-12860, CVE-2026-13506, CVE-2026-13586, CVE-2026-14682, CVE-2026-15055, CVE-2026-58059, CVE-2026-58060, CVE-2026-58061, CVE-2026-58062, CVE-2026-58063,...
EUVD-2026-78062
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in dataclients/kubernetes/admission/admission.go passes the body of requests to the Kubernetes admission endpoint at :9443/admission directly to io.ReadAllr.Body without a size limit. An attacker with...
USN-8739-2: ImageMagick vulnerabilities
USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue...
USN-8739-2 imagemagick vulnerabilities
USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue...