398784 matches found
CVE-2026-109380
modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks indefinitely, exhausting...
CVE-2020-37280
cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions of iterations, exhausting CPU and proce...
CVE-2020-37280
cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions of iterations, exhausting CPU and proce...
CVE-2026-109380 modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field
modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks indefinitely, exhausting...
CVE-2026-109380
The modern-tar library (versions 0.3.5 through 0.8.5) is vulnerable to a memory exhaustion Denial of Service (DoS) condition. The root cause lies in the readOctal() function, which fails to properly validate non-octal bytes, allowing an attacker to produce negative entry sizes . By providing a sp...
EUVD-2026-97878
modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks indefinitely, exhausting...
CVE-2026-109380 modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field
modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks indefinitely, exhausting...
CVE-2020-37280
The cbor-sync library, versions through 1.0.4 , is vulnerable to a resource exhaustion attack within the CBOR.decode function. The root cause is that the component trusts declared array and map lengths without verifying the remaining input. An attacker can provide a small, crafted CBOR payload wi...
CVE-2020-37280 cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array Lengths
cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions of iterations, exhausting CPU and proce...
EUVD-2020-31277
cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions of iterations, exhausting CPU and proce...
EUVD-2026-97871
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash...
CVE-2026-96261
IBM Power Systems Firmware versions FW1060.00 through FW1060.81 are vulnerable to a stack-based buffer overflow (CWE-121) during host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can provide specially crafted configuration data, caus...
CVE-2026-96261 IBM Power Systems Firmware Buffer Overflow
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash...
CVE-2026-96265 IBM Power Systems Firmware Improper Memory Buffer Restriction
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory,...
CVE-2026-96265
IBM Power Systems Firmware versions FW1060.00 through FW1060.81 are vulnerable to a memory buffer restriction issue (CWE-119 ) within the service processor mailbox interface . An attacker with authenticated service-level access to the FSP can transmit a specially crafted mailbox message to read o...
EUVD-2026-97867
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory,...
CVE-2026-96266
IBM Power Systems Firmware (versions FW1060.00 through FW1060.81 ) is vulnerable to a stack-based buffer overflow (CWE-121) during host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can provide specially crafted configuration data to trigger memory...
EUVD-2026-97866
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...
CVE-2026-96266 IBM Power Systems Firmware Buffer Overflow
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...
MGASA-2026-0494 Updated vlc package fixes security vulnerabilities
VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability. CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability. CVE-2026-73324...