CVE-2026-56387

The Apache bRPC RTMP AMF parser is vulnerable to remote memory exhaustion because it accepts 32-bit string lengths and array counts directly from untrusted input. Specifically, the AMF long string parser resizes the destination string to the declared length before verifying the stream contents, w...

Security Bulletin: Multiple vulnerabilities in Python affect AIX

Summary Vulnerabilities in Python: SSL/TLS Security Vulnerabilities CVE-2026-19553, CVE-2026-19445, Archive Extraction / Tarfile Vulnerabilities CVE-2026-19672, CVE-2026-82049, CVE-2026-87910, Authentication / Credential Exposure CVE-2026-15806, Memory Management Vulnerabilities CVE-2026-15310,...

CVE-2026-41114 Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

CVE-2026-41114

The Apache IoTDB JDBC driver is vulnerable to an Uncontrolled Resource Consumption issue (CWE-400) involving large-scale memory exhaustion via the BigDecimal toPlainString method. This vulnerability specifically affects versions 1.3.3 before 2.0.11 . To remediate this issue, users are recommended...

CLSA-2026-1792577610 Fix CVE(s): CVE-2024-0397, CVE-2025-8194

SECURITY UPDATE: infinite loop and deadlock when parsing tar archives with negative member offsets - debian/patches/CVE-2025-8194.patch: reject negative byte counts in TarInfo.block with InvalidHeaderError in Lib/tarfile.py, so a crafted negative member size can no longer move the read offset...

Security update for libheif

This update for libheif fixes the following issues: CVE-2026-84449: hOpRGB2432toYCbCr Memory Access Error / SEGV bsc1281829. Out-of-bounds read and write in derived-item and pixel-plane handling bsc1279444. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Denial-Of-Service (DoS)

io.netty, netty-codec-http3 is vulnerable to a denial-of-service DoS. The vulnerability is due to unbounded processing of continuation bytes, which allows a remote, unauthenticated attacker to exhaust heap memory and consume excessive CPU resources by sending malformed QPACK data, potentially...

Denial Of Service (DoS)

io.netty:netty-codec-http3 is vulnerable to Denial of service DoS. The vulnerability is due to QPACK encoder state being retained without limits or being released when HTTP/3 streams complete, which allows a remote, unauthenticated attacker to exhaust server memory by sending sequential HTTP/3...

Exploit for CVE-2026-109618

CVE-2026-109618 / CVE-2026-109619 PHP session.uploadprogr...

CVE-2026-112063

A flaw was found in libstrophe. A malicious XMPP Extensible Messaging and Presence Protocol server can exploit a stack-based buffer overflow in the SCRAM Salted Challenge Response Authentication Mechanism authentication handler by sending an oversized salt value. This issue allows an attacker to...

CVE-2026-112059

A flaw was found in liblas. By convincing a user to process a specially crafted LAS file containing an oversized schema record, an attacker can trigger an integer truncation issue during memory allocation. This flaw leads to a heap-based buffer overflow, causing an application crash or memory...

CVE-2026-112020

A flaw was found in lodepng. A missing bounds check in the getFilterTypesInterlaced function allows an out-of-bounds memory read when handling decompressed image data. An attacker could exploit this flaw by supplying a specially crafted interlaced PNG image for processing, resulting in a Denial o...

CVE-2026-57487

A flaw was found in libupnp. The HTTP parser fails to enforce configured message size limits when processing chunked transfer-encoded HTTP requests. A remote attacker can exploit this vulnerability by sending an excessively large chunked payload, forcing the application to buffer data beyond...

Decompression Bomb

Apache MINA is vulnerable to a decompression bomb. The vulnerability is due to the CompressionFilter class inflating incoming data without enforcing a size limit, where it allocates a buffer based solely on the decompressed size and does not check the compression ratio, allowing an attacker to se...

CLSA-2025-1747430081 Fix of 47 CVEs

CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...

BIT-RABBITMQ-2026-67414 RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10common/src/amqp10binaryparser.erl materializes each element of AMQP 1.0 arrays whose shared constructor has zero width, while limiting only the number of elements in each array and not the...

BIT-MYSQL-CLIENT-2026-85745 MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STArea reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser advances past a nested geometry header...

BIT-NGINX-GATEWAY-2026-97205 NGINX ngx_http_core_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations, processing a Server Side Includes SSI page containing “include virtual” commands may trigger a Use-After-Free UAF in the NGINX worker process...

BIT-NGINX-2026-97205 NGINX ngx_http_core_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations, processing a Server Side Includes SSI page containing “include virtual” commands may trigger a Use-After-Free UAF in the NGINX worker process...

BIT-MARIADB-MIN-2026-85745 MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STArea reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser advances past a nested geometry header...