DEBIAN-CVE-2026-79241

Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79771

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

CVE-2021-47996

Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...

CVE-2026-79771

Nokogiri versions before 1.19.3 are affected by a memory leak in the XSLT Stylesheet transform method. The root cause is heap allocations leaking when Ruby strings containing null bytes are passed as transform parameters. An unauthenticated, network-based attacker can trigger this by supplying cr...

EUVD-2026-65529

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

CVE-2026-79771 Nokogiri before 1.19.3 Memory Leak via XSLT Transform

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

CVE-2026-79771 Nokogiri before 1.19.3 Memory Leak via XSLT Transform

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

EUVD-2021-34866

Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...

CVE-2021-47996

Nokogiri before 1.11.4 (CRuby implementation, when using the bundled/vendored libxml2) ships libxml2 2.9.10 , which carries multiple known flaws later fixed in libxml2 2.9.12. These include a memory leak in xmlSchemaValidateStream (CVE-2019-20388), a global buffer over-read in xmlEncodeEntitiesIn...

CVE-2021-47996 Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2

Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...

CVE-2026-74678

A flaw was found in the Linux kernel's ax88179178a USB network driver. When the network interface has scatter-gather SG enabled and a packet linearization operation fails, the system fails to free the associated memory buffer. This oversight leads to a memory leak, which could be exploited by an...

CVE-2026-74622

A flaw was found in the Linux kernel's 'atlantic' network driver. The aqringrxdeinit function, responsible for deinitializing receive RX buffers, fails to properly free pages and their associated Direct Memory Access DMA mappings for buffers that have been consumed but not yet refilled. This...

CVE-2026-74699

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability occurs due to improper handling of the q-replaystate, where it is blindly overwritten. This can lead to a memory leak of previously allocated resources. An attacker could exploit this flaw to exhaust system memory,...

Project-Field-Analysis-and-Memory-Leak-Demonstration

Obiettivo L'obiettivo di questo progetto era valutare un host remoto per la vulnerabilità Heartbleed CVE-2014-0160, verificarne la presenza e sfruttarla per estrarre potenziali informazioni sensibili dalla memoria del server tramite il protocollo TLS. Esecuzione 1. Identificazione dei servizi...

The vulnerability of the ice_set_ringparam() function in the drivers/net/ethernet/intel/ice/ice_ethtool.c file of the Ethernet network adapter driver for Intel-based Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the icesetringparam function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ath11k_macDestroy() function in the drivers/net/wireless/ath/ath11k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to access protected information or cause service failure.

The vulnerability of the ath11kmacDestroy function in the drivers/net/wireless/ath/ath11k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

The vulnerability of the `logicvc_drm_config_parse()` function in the `drivers/gpu/drm/logicvc/logicvc_drm.c` file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the logicvcdrmconfigparse function in the drivers/gpu/drm/logicvc/logicvcdrm.c file of the Direct Rendering Infrastructure DRI driver module in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cau...

The vulnerability of the irdma_create_user_ah() function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the irdmacreateuserah function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a attacker to cause a servic...

The vulnerability of the xe_vm_madvise_ioctl() function in the drivers/gpu/drm/xe/xe_vm_madvise.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xevmmadviseioctl function in the drivers/gpu/drm/xe/xevmmadvise.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a...