dsa

A Summary of Go's crypto/dsa Vulnerability CVE-2016-3959 Alex Mullins April 9, 2016 Introduction Recently, there was a bug discovered in the Digital Signature Algorithm DSA crypto library for the Go programming language. In this article we'll go over the details of the bug and how an attacker cou...

CVE-2014-8275_openssl_g2.5

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2026-116158

A flaw was found in ImageMagick. A missing cleanup operation during failed compare routines causes an unreleased memory leak. An attacker could supply crafted inputs that trigger repeated comparison errors, resulting in excessive resource consumption and leading to a Denial of Service DoS...

CVE-2026-57555

Memory Corruption when executing system service routines due to improper handling of user input buffers...

EUVD-2026-92983

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555: Use After Free

Memory Corruption when executing system service routines due to improper handling of user input buffers...

PT-2026-106357

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Memory corruption occurs during the execution of system service routines. This issue is caused by the improper handling of user input buffers, which can lead to...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

CVE-2026-102005

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09...

CVE-2026-102005

Wind River VxWorks 7 versions 24.03 through 26.03 are susceptible to a memory leak vulnerability. This issue occurs when processing specific service routines under certain non-default configuration states, which prevents the system from releasing allocated memory pools before terminating operatio...

CVE-2026-102005 VxWorks Memory Allocation

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09...

EUVD-2026-88482

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09...

CVE-2026-102005 VxWorks Memory Allocation

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09...

PT-2026-102349

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09...

CVE-2026-102005: Missing Release of Memory after Effective Lifetime

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09...

CLSA-2026-1790332295 Fix CVE(s): CVE-2021-4048

SECURITY UPDATE: Out-of-bounds read in the MRRR eigenvector routines - debian/patches/CVE-2021-4048.patch: return early from clarrv, dlarrv, slarrv and zlarrv when M is zero, so the routines no longer read out-of-bounds entries of IBLOCK and the work array - CVE-2021-4048...

CVE-2024-14041

A flaw was found in Bouncy Castle for Java, affecting ML-KEM CRYSTALS-Kyber routines. Specifically, the Poly.toMsg, Poly.compressPoly, and PolyVec.compressPolyVec routines, which handle secret-derived polynomial coefficients, perform division by the modulus q. A remote attacker can exploit this...

CLSA-2026-1785425808 openexr: Fix of 2 CVEs

CVE-2026-34380: fix signed 32-bit integer overflow in the PXR24 decoder bounds check, where uint64t w 3 wrapped to a small positive value and allowed an out-of-bounds write through dout - CVE-2026-34378: fix signed 32-bit integer overflow in srcbuffer pointer arithmetic in the unpack routines,...

CLSA-2026-1785335342 openexr: Fix of 2 CVEs

CVE-2026-34380: fix signed 32-bit integer overflow in the PXR24 decoder bounds check, where uint64t w 3 wrapped to a small positive value and allowed an out-of-bounds write through dout - CVE-2026-34378: fix signed 32-bit integer overflow in srcbuffer pointer arithmetic in the unpack routines,...

UBUNTU-CVE-2026-64515

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element MLE is contained in a non-transmitted profile, the defragmentation routine is called with a pointer to the defragmented copy, but the original...