27274 matches found
CVE-2026-97449: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add package limit checks in parser functions Add package limit checks in parser functions to prevent out-of-bounds access...
PT-2026-97865
Name of the Vulnerable Software and Affected Versions simdjson version 4.6.1 Description A one-byte out-of-bounds read exists in the dom::parser::parse unpadded function. A specially crafted truncated JSON document, where the final structural token closes a nested array or object, can cause the...
Linux Distros Unpatched Vulnerability : CVE-2026-81885
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because...
SUSE SLES12 Security Update : gdb (SUSE-SU-2026:4294-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4294-1 advisory. This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser readmemberfunctions via crafted ELF...
Linux Distros Unpatched Vulnerability : CVE-2026-81882
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable...
Linux Distros Unpatched Vulnerability : CVE-2026-81881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable becau...
PT-2026-98273
Name of the Vulnerable Software and Affected Versions php affected versions not specified Description The mysqlnd wire protocol parser reads fields from server packets without first verifying if the packet contains sufficient bytes. This allows a malicious or compromised MySQL server to send a...
Linux Distros Unpatched Vulnerability : CVE-2026-81886
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable...
CVE-2026-97057: Improper Validation of Specified Quantity in Input
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...
Linux Distros Unpatched Vulnerability : CVE-2026-81884
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LCDATAINCODE parser was vulnerable because the...
PT-2026-98219
Name of the Vulnerable Software and Affected Versions zbateson/mail-mime-parser versions prior to 3.0.6 zbateson/mail-mime-parser versions prior to 4.0.2 Description CRLF carriage-return / line-feed header injection occurs when the library is used to build or forward MIME messages with an...
CVE-2026-88358
simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded. A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument to access buflen after the input buffer has been...
PT-2026-99157
This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...
PT-2026-97880
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the of alias scan stem parser. The issue occurs because the parser executes the isdigit function on the byte at end - 1 before verifying that end start...
Security update for gdb (important)
openSUSE security update: security update for gdb ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21890-1 Rating: important References: bsc1277757 Cross-References: CVE-2026-13732 CVSS scores: CVE-2026-13732 SUSE : 7.8...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124537)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124537 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding...
CVE-2026-88358
simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded. A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument to access buflen after the input buffer has been...
CVE-2026-88358: Out-of-bounds Read
simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded. A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument to access buflen after the input buffer has been...
