404721 matches found
net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...
crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references
A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello ECH outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a...
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when "gnutlsrecordsend" returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocke...
DEBIAN-CVE-2026-113868
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
CVE-2026-113868
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
GHSA-46JR-4WX8-V453 MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
Summary In affected versions, servers put no limit on how many array elements and object keys they validated in one request. One HTTP request within the default 4 MiB size limit could exhaust the server's memory, and the process aborted with JavaScript heap out of memory. No credentials are neede...
MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
Summary In affected versions, servers put no limit on how many array elements and object keys they validated in one request. One HTTP request within the default 4 MiB size limit could exhaust the server's memory, and the process aborted with JavaScript heap out of memory. No credentials are neede...
CVE-2026-113679
A flaw was found in HarfBuzz. An attacker can trigger an out-of-bounds write by enticing an application using the experimental WebAssembly Wasm shaper to process a specially crafted font. Due to an incorrect function signature in the glyph string conversion interface, the font's embedded...
CVE-2026-112094
A flaw was found in mxml. A remote attacker can exploit a use-after-free vulnerability by supplying specially crafted XML input processed by the mxmlloaddata function. This flaw can lead to memory corruption, causing a Denial of Service DoS through an application crash or potentially allowing...
EUVD-2026-105295
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
CVE-2026-113868
Thunderbird is vulnerable to an uninitialized memory disclosure and out-of-bounds read during NTLM authentication for POP3 and SMTP servers. The issue stems from a lack of validation on the server's challenge string; a malicious server can provide an invalid base64 challenge to cause Thunderbird ...
CVE-2026-113868
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
CVE-2026-113868 Uninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authentication
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
CVE-2026-102477
A flaw was found in Eclipse Vert.x vertx-grpc-server. The server's configured maximum message size limit is enforced only on the received compressed data rather than on the uncompressed payload. A remote attacker can exploit this flaw by sending a specially crafted compressed message, causing...
CVE-2026-21266
This CVE ID is rejected and does not represent an active vulnerability entry, as it was issued in error.
CVE-2026-100132
Acrobat for Edge is vulnerable to an out-of-bounds read (CWE-125) which could allow an attacker to disclose sensitive memory . Exploitation requires user interaction , such as a victim visiting a maliciously crafted URL or interacting with a compromised web page. No specific exploit details or re...
CVE-2026-112284
A flaw was found in libaribcaption. An out-of-bounds read vulnerability exists within the caption decoding component due to missing upper bound checks when handling character sets. An attacker can exploit this issue by supplying specially crafted caption data for the application to process...
CVE-2026-113672
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...
CVE-2026-88382
A flaw was found in hiredis. The parser for REdis Serialization Protocol RESP aggregate types does not properly restrict memory allocation when handling incoming replies. A remote attacker or malicious server could exploit this vulnerability by providing specially crafted RESP data, leading to...