410244 matches found
CVE-2026-98633
A flaw was found in the Linux kernel's Bluetooth NXP UART driver, which can lead to a Denial of Service DoS. When device coredump support is disabled in the kernel configuration, handling firmware dump data fails to release cloned socket buffers upon encountering an unsupported operation error. A...
CLSA-2026-1792599160 libsoup: Fix of 6 CVEs
CVE-2026-102555: decode base64 data: URI content with gbase64decodestep over the real buffer length in souprequestdatasend, so a percent-encoded NUL no longer truncates the payload, leaks the decode buffer and raises a GLib-CRITICAL - CVE-2026-102556: emit the WebSocket ::pong signal with a...
CVE-2026-89856
A flaw was found in the Linux kernel's scsi: qla2xxx component. A misconfigured or malicious hot-plugged device could provide specific Message Signaled Interrupts MSI-X vector counts, causing an internal queue count to become zero due to truncation. This leads to an attempt to access an invalid...
CVE-2026-113270
A flaw was found in chromium-browser. A remote attacker can execute arbitrary code outside the browser sandbox by tricking a user into loading a specially crafted HTML page. This issue is caused by a use-after-free memory corruption vulnerability within the Internals component...
php2shell-audit
php2shell-audit php2shell-audit is a non-destructive exposu...
CVE-2026-113795 pypdf: Possible large memory usage for streams with multiple filters
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...
EUVD-2026-107337
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...
CVE-2026-113795
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...
CVE-2026-113795 pypdf: Possible large memory usage for streams with multiple filters
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...
CVE-2026-113795
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...
CVE-2026-113795
The pypdf open-source Python PDF library is vulnerable to uncontrolled resource consumption in versions prior to 6.20.0 . An attacker can cause large memory consumption by providing a crafted PDF stream containing a significant number of filters or multiple filters that transmit large amounts of ...
Apache DataSketches numerical error vulnerability
A security vulnerability exists in Apache DataSketches C++ versions from 4.1.0 up to and including 5.3.0. This vulnerability arises because the Count-Min sketch fails to include the leading part of the input size during deserialization; additionally, there is a 32-bit integer wrap-around in table...
Roundcube Webmail Project Roundcube Webmail Resource Management Error Vulnerability
The Roundcube Webmail project contains a resource management error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because ImageMagick can bypass resource limits during thumbnail generation. On Windows, memory checks are only performed when rcubeima...
Roundcube Webmail Project Roundcube Webmail Resource Management Error Vulnerability
The Roundcube Webmail project contains a resource management error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because the CSS proxy via utils/modcss operations fails to limit the size of style sheets it reads and does not set a read timeout. As...
LiteSpeed Tech “Resource Management Error” vulnerability
LiteSpeed Tech versions prior to 4.9.0 contain a resource management error vulnerability. This vulnerability arises because the HTTP/3 implementation fails to limit the number of buffer header sets, potentially leading to excessive memory consumption and susceptibility to QPACK amplification...
Pascal Buchbinder mod_qos buffer error vulnerability
Versions 11.74, 11.76, and 11.79 of Pascal Buchbinder’s modqos contain a buffer error vulnerability. This vulnerability arises when client IP addresses are recorded during connection rate monitoring; no array boundary checks are performed. As a result, unauthenticated remote attackers can exploit...
Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the...
Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
Palo Alto Networks is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. CVE-2026-109618 involves a remote code execution vulnerability where handling out-of-memory errors via longjmp leaves request memory uninitialized due to improper control flow management,...
USN-8930-2 u-boot vulnerabilities
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could...