EUVD-2026-112559

A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/vtk42.py of the component VTK Reader. Executing a manipulation of the argument DIMENSIONS can lead to uncontrolled memory allocation. The attack can be executed remotely. The project w...

CVE-2026-118590

A security vulnerability exists in nipy nibabel up to version 5.4.2 . The flaw is located in the Header Handler component, specifically within the array_from_file function of the nibabel/volumeutils.py file. This issue allows for uncontrolled memory allocation , which can be triggered via a remot...

EUVD-2026-112560

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function arrayfromfile of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The attack is possible to be carried out remotel...

CVE-2026-118589

A weakness in nschloe meshio (up to version 5.3.5 ) affects an unknown function within the VTK Reader component, specifically in the file meshio/_vtk_42.py. By manipulating the DIMENSIONS argument, an attacker can trigger an uncontrolled memory allocation . This vulnerability can be exploited rem...

CVE-2026-32941

A framework-wide vulnerability in Sliver C2 allows for an unauthenticated, remote Denial of Service by triggering Uncontrolled Memory Allocation CWE-789 / CWE-400, leading to a process-wide Out-of-Memory OOM crash. References: Tenable Reproduction Steps: 1. Extract Credentials: Obtain the mTLS...

EUVD-2026-109575

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

Apache ActiveMQ CPP 3.9.5 Remote Denial of Service

Apache ActiveMQ CPP version 3.9.5 contains an uncontrolled memory allocation vulnerability in OpenWire byte-array unmarshalling that allows a malicious broker to crash a client. !/usr/bin/env python Apache ActiveMQ CPP 3.9.5 OpenWireFormat::unmarshal Denial of Service Vendor: The Apache Software...

CVE-2026-116095

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

CVE-2026-116095 smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

CVE-2026-116095

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

CVE-2026-116095 smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

PT-2026-123121

Name of the Vulnerable Software and Affected Versions smg-project smg versions 1.7.0 through 1.10.1 Description A remote attack can trigger uncontrolled memory allocation within the llm-multimodal component. The issue resides in the jpeg turbo::decode jpeg rgb function located in the...

Apache NiFi MiNiFi C++ 1.0.0 Uncontrolled Memory Allocation

Summary MiNiFi - a subproject of Apache NiFi - is a complementary data collection approach that supplements the core tenets of NiFi in dataflow management, focusing on the collection of data at the source of its creation. Description Apache NiFi MiNiFi C++ contain an uncontrolled memory allocatio...

CVE-2026-74757 Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count

Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC version 1.18.0 on all platforms allows remote attackers to make the server allocate a large amount of memory via sending a crafted mcpack request with a huge array item count. Root Cause: The bRPC mcpack2pb parser trusts t...

CVE-2026-74757 Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count

Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC version 1.18.0 on all platforms allows remote attackers to make the server allocate a large amount of memory via sending a crafted mcpack request with a huge array item count. Root Cause: The bRPC mcpack2pb parser trusts t...

CVE-2026-74757

Apache bRPC (versions

Apache NiFi MiNiFi C++ 1.0.0 Uncontrolled Memory Allocation

Apache NiFi MiNiFi C++ versions 1.0.0 and 0.99.2 contain an uncontrolled memory allocation issue in the InputStream reader. A length field from a site-to-site or C2 stream can cause an oversized allocation and crash the agent. // // // Apache NiFi MiNiFi C++ 1.0.0 Uncontrolled Memory Allocation /...

Linux Distros Unpatched Vulnerability : CVE-2026-109351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by supplying a huge...

CVE-2026-112283 libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

CVE-2026-112283

VideoLAN libbluray versions through 1.5.1 are vulnerable to an uncontrolled memory allocation flaw within the _parse_extent_start_points() function in clpi_parse.c. The root cause is a lack of bounds checking on the num_point field. An attacker can provide a crafted .clpi file on a disc, image, o...