Oneflow security vulnerabilities

Oneflow is an open-source deep learning framework developed by Oneflow. Version 0.9.0 of Oneflow contains a security vulnerability; this vulnerability stems from a segmentation violation in the flow.columnstack component, which could lead to a denial-of-service attack...

CVE-2025-71004

A segmentation violation in the oneflow.logicalor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-71004

A segmentation violation in the oneflow.logicalor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix

A vulnerability was found in PHP. If a SoapVar instance is created with a fully qualified name larger than 2G, this will cause a NULL pointer dereference resulting in a segmentation fault, leading to a denial of service...

Astra Linux – Vulnerability in Tiff

Libtiff 4.5.0 is vulnerable to Buffer Overflow issues through /libtiff/tools/tiffcrop.c:8499. Incorrect updates to the buffer size after calling rotateImage in tiffcrop cause a heap-buffer-overflow and Segmentation Fault...

OSV-2026-141 Segv on unknown address in yuv2rgb4_X_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478212631 Crash type: Segv on unknown address Crash state: yuv2rgb4Xc packedvscale ffswscale...

Alibaba Cloud Linux 3 : 0012: libpq (ALINUX3-SA-2026:0012)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0012 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-12818: Integer wraparound in multiple...

ALPINE-CVE-2026-24401

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonica...

AZL-75204 CVE-2026-24401 affecting package avahi for versions less than 0.8-5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonica...

AZL-75207 CVE-2026-24401 affecting package avahi for versions less than 0.8-7

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonica...

Avahi security vulnerability

Avahi is a set of open-source local service discovery tools for Linux. Versions of Avahi 0.9rc2 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the sending of mDNS responses that included recursive CNAME records, which could lead to segmentation violations and...

OESA-2026-1204 harfbuzz security update

HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in...

OSV-2026-119 Segv on unknown address in gpsd_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477658237 Crash type: Segv on unknown address Crash state: gpsdpoll FuzzDrivers.c...

PT-2026-5587

Name of the Vulnerable Software and Affected Versions live555 affected versions not specified Description A flaw exists in the rgaufman/live555 fork of live555 that could allow a remote attacker to trigger a segmentation fault within the increaseBufferTo function. Successful exploitation of this...

MiracleLinux 8 : lua-5.3.4-12.el8 (AXSA:2021-2619:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2619:01 advisory. lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : fribidi-1.0.10-6.el9.2 (AXSA:2022-4472:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4472:02 advisory. fribidi: Stack based buffer overflow CVE-2022-25308 fribidi: Heap-buffer-overflow in fribidicaprtltounicode CVE-2022-25309 fribidi: SEGV in...

MiracleLinux 8 : fribidi-1.0.4-9.el8 (AXSA:2022-4162:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4162:01 advisory. fribidi: Stack based buffer overflow CVE-2022-25308 fribidi: Heap-buffer-overflow in fribidicaprtltounicode CVE-2022-25309 fribidi: SEGV in...

MiracleLinux 8 : libsndfile-1.0.28-16.el8_10 (AXSA:2024-9429:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9429:03 advisory. libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 Tenable has extracted the preceding description block directly fro...

MiracleLinux 9 : libsndfile-1.0.31-8.el9_5.2 (AXSA:2024-9490:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9490:04 advisory. libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 Tenable has extracted the preceding description block directly fro...

MiracleLinux 8 : openjpeg2-2.4.0-5.el8 (AXSA:2022-4149:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4149:01 advisory. openjpeg: segmentation fault in opj2decompress due to uninitialized pointer CVE-2022-1122 Tenable has extracted the preceding description block directly from...