CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

UBUNTU-CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

kernel: inet: frags: strip GSO state from fragments before reassembly

A flaw was found in the Linux kernel's network fragment reassembly process. An unprivileged local user, or a guest in a virtualized environment, could craft specially formed IPv4 or IPv6 network fragments that incorrectly retain Generic Segmentation Offload GSO state after reassembly. This...

CVE-2026-110673

A flaw was found in perl-Cpanel-JSON-XS. When the allowtags configuration is enabled, the "" character starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not counted against maxdepth. A maliciously...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...

Eclipse OpenJ9 buffer error vulnerability

Eclipse OpenJ9 versions 0.63.0 and earlier contain a security vulnerability. This vulnerability stems from improper boundary checks in the JITServer component during the processing of protocol messages and responses. It may allow unauthenticated remote attackers or malicious JITServer instances t...

CVE-2026-98556

A flaw was found in the Linux kernel's Google Virtual NIC gve driver. A local user with raw packet access or an adjacent guest system can trigger a Denial of Service DoS by sending network packets with an excessively large segment size. The driver fails to validate the Maximum Segment Size MSS...

biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2026-53995 via mlflow (1.13.1)

mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from a segmentation flaw in the gfpropsequalinternal function located at /filtercore/filterprops.c. Attackers can exploit this flaw by providing specially crafted data files, potentially leading to a...

CVE-2025-60494

The GPAC Project/MP4Box software, versions before 2.5 , is vulnerable to a segmentation violation in the gf_props_equal_internal function located in /filter_core/filter_props.c. An attacker can exploit this flaw by supplying a crafted data file to cause a Denial of Service (DoS) . The vulnerabili...

PT-2026-119046

A segmentation violation in the gf props equal internal function /filter core/filter props.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

Linux Distros Unpatched Vulnerability : CVE-2026-110673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, starts a tagged...

RHEL 9 : kernel (RHSA-2026:79786)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79786 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: udp: fix potential use-after-free in...

AZL-109842 CVE-2026-110673 affecting package perl-Cpanel-JSON-XS 4.39-1

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...

DEBIAN-CVE-2026-110673

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...

CVE-2026-110673

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...