Astra Linux – Vulnerability in libraw

LibRaw before 0.20-RC1 lacks a check for the thumbnail size range. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength is used without validating T.tlength...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: a potential memory leak has been fixed in ext4fcrecordregions. Since krealloc may return NULL, in this case, state-fcregions may not be freed by krealloc. However, state-fcregions is already set to NULL. This could lead to ...

CVE-2026-55781-poc

CVE-2026-55781 — حجب الخدمة DoS في محلل UFS الخاص بـ NanaZip تخصيص ذاكرة غير محدود في معالج UFS الخاص بـ NanaZip عبر حقل fsbsize الذي يتحكم فيه المهاجم. الملخص الحقل| القيمة ---|--- CVE| CVE-2026-55781 الإشعار| GHSA-m34h-jf84-m74h المورّد| M2Team / NanaZip المتأثر| NanaZip = 6.5 Preview 6.5.1742....

CVE-2026-59323

A flaw was found in Micrometer Tracing's Brave bridge when using W3C baggage propagation. A remote attacker can exploit this by sending specially crafted requests with excessively large baggage headers. This can lead to unbounded memory allocation, causing high CPU usage, increased garbage...

Security update for rpcbind

This update for rpcbind fixes the following issue: CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service bsc1282326. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdat...

SUSE-SU-2026:4446-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service bsc1282326...

CVE-2026-94633

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

PT-2026-106252

Name of the Vulnerable Software and Affected Versions Docling versions 2.0.0 through 2.130.0 Description The HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/html backend.py, docling/backend/jats backend.py, and docling/backend/boxnote backend.py, process...

CVE-2026-82458

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

The vulnerability in the _load_bitmaps() function of the PIL/PcfFontFile.py file from the Pillow image processing library allows a attacker to cause a denial-of-service attack.

The vulnerability of the loadbitmaps function in the PIL/PcfFontFile.py file from the Python Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the GdImageFile._open() function in the PIL/GdImageFile.py library for working with images in the Python Pillow library allows a attacker to cause a service denial.

The vulnerability of the GdImageFile.open function in the PIL/GdImageFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the `FontFile.compile()` function in the PIL/FontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.

The vulnerability of the FontFile.compile function in the PIL/FontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the bdf_char() function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.

The vulnerability of the bdfchar function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-49975

CVE-2026-49975 قنبلة HTTP/2 ★ إثبات مفهوم قنبلة HTTP/2 CVE-2026-49975 ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 نظرة عامة CVE-2026-49975 هي ثغرة حجب الخدمة DoS في خادم Apache HTTP. تحدث الثغرة في مسار معالجة طلبات HTTP/2، حيث يمكن دمج حقول ترويسة cookie...

Linux Distros Unpatched Vulnerability : CVE-2026-94633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affect...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

Linux Distros Unpatched Vulnerability : CVE-2026-82458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang,...

Linux Distros Unpatched Vulnerability : CVE-2026-102731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer or a MITM can send a small BER-encoded response causing...

Linux Distros Unpatched Vulnerability : CVE-2026-83745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both...