Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb – revert the use of devmkzalloc in btusb This change reverts to the behavior described in commit 98921dbd00c4e “Bluetooth: Use devmkzalloc in btusb.c file”. In btusbprobe, we use devmkzalloc to allocate the btusb...

Astra Linux – Vulnerability in libraw

LibRaw before 0.20-RC1 lacks a check for the thumbnail size range. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength is used without validating T.tlength...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: a potential memory leak has been fixed in ext4fcrecordregions. Since krealloc may return NULL, in this case, state-fcregions may not be freed by krealloc. However, state-fcregions is already set to NULL. This could lead to ...

CVE-2026-55781-poc

CVE-2026-55781 — NanaZip UFS Parser DoS Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled fsbsize field. Summary | Field | Value | |---|---| | CVE | CVE-2026-55781 | | Advisory | GHSA-m34h-jf84-m74h | | Vendor | M2Team / NanaZip | | Affected | NanaZip = 6.5 Preview...

CVE-2026-59323

A flaw was found in Micrometer Tracing's Brave bridge when using W3C baggage propagation. A remote attacker can exploit this by sending specially crafted requests with excessively large baggage headers. This can lead to unbounded memory allocation, causing high CPU usage, increased garbage...

Security update for rpcbind

This update for rpcbind fixes the following issue: CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service bsc1282326. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdat...

SUSE-SU-2026:4446-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service bsc1282326...

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-94633

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82458

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

PT-2026-106252

Name of the Vulnerable Software and Affected Versions Docling versions 2.0.0 through 2.130.0 Description The HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/html backend.py, docling/backend/jats backend.py, and docling/backend/boxnote backend.py, process...

The vulnerability in the _load_bitmaps() function of the PIL/PcfFontFile.py file from the Pillow image processing library allows a attacker to cause a denial-of-service attack.

The vulnerability of the loadbitmaps function in the PIL/PcfFontFile.py file from the Python Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the GdImageFile._open() function in the PIL/GdImageFile.py library for working with images in the Python Pillow library allows a attacker to cause a service denial.

The vulnerability of the GdImageFile.open function in the PIL/GdImageFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the `FontFile.compile()` function in the PIL/FontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.

The vulnerability of the FontFile.compile function in the PIL/FontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the bdf_char() function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.

The vulnerability of the bdfchar function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

Linux Distros Unpatched Vulnerability : CVE-2026-82458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang,...

Linux Distros Unpatched Vulnerability : CVE-2026-85494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value,...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

Linux Distros Unpatched Vulnerability : CVE-2026-94633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affect...