410342 matches found
CVE-2026-113795 pypdf: Possible large memory usage for streams with multiple filters
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...
CVE-2026-113795
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...
CVE-2026-113795
The pypdf open-source Python PDF library is vulnerable to uncontrolled resource consumption in versions prior to 6.20.0 . An attacker can cause large memory consumption by providing a crafted PDF stream containing a significant number of filters or multiple filters that transmit large amounts of ...
CVE-2026-113795
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0...
Apache DataSketches numerical error vulnerability
A security vulnerability exists in Apache DataSketches C++ versions from 4.1.0 up to and including 5.3.0. This vulnerability arises because the Count-Min sketch fails to include the leading part of the input size during deserialization; additionally, there is a 32-bit integer wrap-around in table...
Roundcube Webmail Project Roundcube Webmail Resource Management Error Vulnerability
The Roundcube Webmail project contains a resource management error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because ImageMagick can bypass resource limits during thumbnail generation. On Windows, memory checks are only performed when rcubeima...
Roundcube Webmail Project Roundcube Webmail Resource Management Error Vulnerability
The Roundcube Webmail project contains a resource management error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because the CSS proxy via utils/modcss operations fails to limit the size of style sheets it reads and does not set a read timeout. As...
LiteSpeed Tech “Resource Management Error” vulnerability
LiteSpeed Tech versions prior to 4.9.0 contain a resource management error vulnerability. This vulnerability arises because the HTTP/3 implementation fails to limit the number of buffer header sets, potentially leading to excessive memory consumption and susceptibility to QPACK amplification...
Pascal Buchbinder mod_qos buffer error vulnerability
Versions 11.74, 11.76, and 11.79 of Pascal Buchbinder’s modqos contain a buffer error vulnerability. This vulnerability arises when client IP addresses are recorded during connection rate monitoring; no array boundary checks are performed. As a result, unauthenticated remote attackers can exploit...
Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the...
Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
Palo Alto Networks is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. CVE-2026-109618 involves a remote code execution vulnerability where handling out-of-memory errors via longjmp leaves request memory uninitialized due to improper control flow management,...
USN-8930-2 u-boot vulnerabilities
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could...
php2shell-poc
PHP2Shell: a reproducible PHP request-lifecycle RCE lab...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
Important: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
php: php: Information disclosure via crafted TLS server certificate
A flaw was found in PHP. When validating secure connections using Transport Layer Security TLS, an error in how wildcard domain names in server certificates are verified can lead to an out-of-bounds memory read. A malicious server presenting a specially crafted certificate can exploit this issue...
php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser
A flaw was found in PHP. The MySQL Native Driver mysqlnd wire protocol parser fails to verify that an incoming packet contains enough bytes before reading its fields. A malicious or compromised database server can send a truncated packet, causing the client application to read past the buffer...
php: php: Information disclosure via out-of-bounds read in stream filters
A flaw was found in PHP. When processing certain conversion stream filters with line-break settings containing a null byte, the filter duplicates the string but retains the original length rather than the truncated size. An attacker who can influence filter options could exploit this out-of-bound...
Security update for php8
This update for php8 fixes the following issue: Update to php 8.3.36: CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE bsc1286027. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...