mongobleed

mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...

CVE-2026-107383

A flaw was found in MariaDB Connector/Node.js. This vulnerability allows an attacker to cause an information disclosure of uninitialized application memory into the database. When processing geographic data in GeoJSON format, the connector allocates memory buffers before verifying data structures...

firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to uninitialized memory in the DOM: Web Serial component...

firefox: Sandbox escape due to uninitialized memory in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to uninitialized memory in the Graphics component...

firefox: Sandbox escape due to uninitialized memory in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to uninitialized memory in the Graphics component...

firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to uninitialized memory in the DOM: Web Serial component...

CVE-2026-120754

HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Zfilterscaleoffset in src/H5Zscaleoffset.c. The decode path validates reads against the allocated size of the chunk buffer rather than the number of bytes actually read from the file. Because H5Dchunklock deliberately siz...

CVE-2026-99219

A flaw was found in the Linux kernel's ftrace function tracing subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when reading tracing filter information while a kernel module is simultaneously loaded or unloaded, causing th...

Linux Distros Unpatched Vulnerability : CVE-2026-120754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Zfilterscaleoffset in src/H5Zscaleoffset.c. The decode path validates reads against...

CVE-2026-120754

A flaw was found in HDF5. This vulnerability allows an attacker to cause information disclosure by convincing a user or application to process a specially crafted HDF5 file. During decompression, bounds checks incorrectly evaluate the buffer's total allocated size rather than the actual amount of...

CVE-2026-120754

HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Zfilterscaleoffset in src/H5Zscaleoffset.c. The decode path validates reads against the allocated size of the chunk buffer rather than the number of bytes actually read from the file. Because H5Dchunklock deliberately siz...

AZL-112658 CVE-2026-120754 affecting package hdf5 1.14.6-6

HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Zfilterscaleoffset in src/H5Zscaleoffset.c. The decode path validates reads against the allocated size of the chunk buffer rather than the number of bytes actually read from the file. Because H5Dchunklock deliberately siz...

CVE-2026-120754 Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter

HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Zfilterscaleoffset in src/H5Zscaleoffset.c. The decode path validates reads against the allocated size of the chunk buffer rather than the number of bytes actually read from the file. Because H5Dchunklock deliberately siz...

EUVD-2026-115912

HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Zfilterscaleoffset in src/H5Zscaleoffset.c. The decode path validates reads against the allocated size of the chunk buffer rather than the number of bytes actually read from the file. Because H5Dchunklock deliberately siz...

CVE-2026-120754

HDF5 versions through 2.2.0 are vulnerable to an uninitialized memory read in H5Z__filter_scaleoffset() located in src/H5Zscaleoffset.c. The vulnerability stems from the decode path validating reads against the allocated buffer size rather than the actual bytes read from the file. Because H5D__ch...

CVE-2026-118448

A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects ndtotext. If the underlying text conversion fails, including failures caused by invalid parameters, the output buffer may remain uninitialized while still being converted into a Python return value. This may...

CVE-2026-118447

A use of uninitialized memory vulnerability in the pybddisasm Python bindings may disclose process memory when instruction decoding fails. The nddecode, nddecodeex, nddecodeex2, and nddecodewithcontext functions may return an INSTRUX object whose contents have not been initialized after an...

EUVD-2026-115700

A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects ndtotext. If the underlying text conversion fails, including failures caused by invalid parameters, the output buffer may remain uninitialized while still being converted into a Python return value. This may...

CVE-2026-118448 Uninitialized output buffer returned after nd_to_text failure in pybddisasm

A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects ndtotext. If the underlying text conversion fails, including failures caused by invalid parameters, the output buffer may remain uninitialized while still being converted into a Python return value. This may...

CVE-2026-118448

The pybddisasm Python bindings are vulnerable to a use of uninitialized memory vulnerability in the nd_to_text function. If the underlying text conversion fails (e.g., due to invalid parameters), the output buffer remains uninitialized but is still converted into a Python return value. This could...