CVE-2026-26459

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

CVE-2026-26452

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...

CVE-2026-26459

ccoap (identified by commit 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 ) contains a vulnerability in its option parsing logic that triggers a segmentation fault when processing malformed CoAP messages with insufficient option data. The root cause lies in the library failing to handle short or malfo...

CVE-2026-26452

ccoap at commit 77f55c4 contains a vulnerability in its option parsing logic that triggers a segmentation fault when processing CoAP messages containing invalid option numbers. The crash suggests a denial-of-service risk for services relying on this library. No CVSS score, patch version, or confi...

EUVD-2026-67099

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

EUVD-2026-67095

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...

CVE-2026-80587

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the code doesn't expect some combinations to be present. That's speciall...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100739 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix out-of-bounds read on option matching In nfosfmatch, the nfosfhdrctx...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100105 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix out-of-bounds read on option matching In nfosfmatch, the nfosfhdrctx...

CVE-2026-72104

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...

EUVD-2026-59062

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...

PT-2026-72293

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cache mode",...

CVE-2026-72712 Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parseoptions function in nselib/packet.lua to allocate...

PT-2026-70826

Name of the Vulnerable Software and Affected Versions Nmap versions prior to 8.0 Description A denial of service issue allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. This malformed packet triggers the Packet:parse options function...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: xttcpmss: Check the remaining length before reading optlen Quoting the reporter: In net/netfilter/xttcpmss.c lines 53-68, the TCP option parser reads opi+1 directly, without validating the remaining option length. If t...

CVE-2026-71212

xidown a yt-dlp/ffmpeg GUI wrapper builds its yt-dlp command-line invocation xidown/core/scanner.py and downloader.py by appending the user-provided or scanned URL as a bare trailing positional argument, with no '--' end-of-options marker and no scheme validation anywhere in the codebase...

protobufjs: Denial of Service via infinite loop in .proto option parsing

Summary protobufjs parsed option names by advancing through schema tokens until it reached an = token, without checking for end of input. A crafted .proto schema that opens an option declaration but ends prematurely could cause the option parser to loop without ever terminating. This affects the...

NPM: protobufjs: Denial of Service via infinite loop in .proto option parsing

NPM: protobufjs: Denial of Service via infinite loop in .proto option parsing vulnerability discovered by ? in WordPress Npm protobufjs versions = 7.5.0, = 7.6.4...

GHSA-J3F2-48V5-CCWW protobufjs: Denial of Service via infinite loop in .proto option parsing

Summary protobufjs parsed option names by advancing through schema tokens until it reached an = token, without checking for end of input. A crafted .proto schema that opens an option declaration but ends prematurely could cause the option parser to loop without ever terminating. This affects the...

Infinite loop

Overview protobufjs is a protocol buffer for JavaScript & TypeScript. Affected versions of this package are vulnerable to Infinite loop in the option parsing. An attacker can cause the application to enter an infinite loop by submitting a crafted .proto schema that opens an option declaration and...