155 matches found
CVE-2026-32941
Sliver C2의 프레임워크 전반의 취약점으로 인해 인증되지 않은 원격 서비스 거부Denial of Service가 가능하며, 제어되지 않는 메모리 할당CWE-789 / CWE-400을 유발하여 프로세스 전체의 메모리 부족OOM 충돌로 이어집니다. 참조: Tenable 재현 단계: 1. 자격 증명 추출: 캡처했거나 생성한 Sliver 임플란트에서 mTLS 인증서와 개인 키를 확보합니다. 2. PoC 편집: mtlspoc.go를 열고 var 블록의 자리 표시자 값c2Endpoint, clientCertPEM,...
CVE-2026-107387 music-metadata: Uncontrolled memory allocation in APEv2 parser
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 parser reads an attacker-controlled tag-item size and allocates a Uint8Array for a binary item before proving that the declared item fits in the remaining tag or file data. A small crafted APE file ca...
CVE-2026-106453
A flaw was found in lz4-java. The library trusts the decompressed length header in compressed input before validating the input data, leading to uncontrolled memory allocation. A remote attacker can exploit this vulnerability by supplying a specially crafted input that specifies an excessively...
The vulnerability of the bdf_char() function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.
The vulnerability of the bdfchar function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability in the _load_bitmaps() function of the PIL/PcfFontFile.py file from the Pillow image processing library allows a attacker to cause a denial-of-service attack.
The vulnerability of the loadbitmaps function in the PIL/PcfFontFile.py file from the Python Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the GdImageFile._open() function in the PIL/GdImageFile.py library for working with images in the Python Pillow library allows a attacker to cause a service denial.
The vulnerability of the GdImageFile.open function in the PIL/GdImageFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability in the `FontFile.compile()` function in the PIL/FontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.
The vulnerability of the FontFile.compile function in the PIL/FontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the handleReadableStream() function in the file pdns/dnsdistdist/doq.cc, and the processH3DataEvent() function in the file pdns/dnsdistdist/doh3.cc, both from the DNS load balancer and proxy for DNS traffic, allows a attacker to cause a service failure.
The vulnerability of the handleReadableStream function in the pdns/dnsdistdist/doq.cc file and the processH3DataEvent function in the pdns/dnsdistdist/doh3.cc file, both from the DNS load balancer and proxy components, is related to uncontrolled memory allocation. Exploiting this vulnerability...
The vulnerability of the libssh library, related to uncontrolled memory allocation, allows a hacker to cause a service failure.
The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2026-88382
hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...
DEBIAN-CVE-2026-88382
hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...
CVE-2026-88382: Allocation of Resources Without Limits or Throttling
hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...
CVE-2026-88382
hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...
CVE-2026-88382
hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...
EUVD-2026-86315
hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...
PT-2026-98150
hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...
CVE-2026-88382
The hiredis library (commit 29ea279, post-v1.5.0) contains an uncontrolled memory allocation vulnerability within its RESP aggregate parser . This flaw allows for the allocation of resources without sufficient limits or throttling. While the vulnerability is documented across multiple security ad...
CVE-2026-75935
A flaw was found in Amazon ion-java. This uncontrolled memory allocation vulnerability in the binary Ion stream cursor allows remote attackers to cause a denial of service DoS by sending a specially crafted Ion binary document. The crafted document contains a declared-length field that triggers...
CVE-2026-81886
A flaw was found in radare2. The Windows 64-bit crash-dump dmp64 parser in radare2 is vulnerable to uncontrolled memory allocation. A local user could exploit this by opening a specially crafted full-memory Windows crash dump, leading to the parser repeatedly allocating memory without proper...
MGASA-2026-0435 Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...