tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

CVE-2026-70399

A flaw was found in inets. An unauthenticated remote attacker can exploit a resource allocation vulnerability in the Erlang/OTP inets httpd component. This flaw allows the attacker to cause a denial of service by opening and holding open a large number of connections. The server fails to enforce...

CVE-2026-25281

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...

CVE-2026-25278

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

CVE-2025-59607

Memory Corruption when copying large input data exceeds normal allocation limits...

CVE-2026-25281

CVE-2026-25281 is an Allocation of Resources Without Limits or Throttling vulnerability in Qualcomm OOBM (Out-Of-Band Management). The root cause is insufficient memory allocation validation when processing large or numerous request buffers, leading to a transient denial of service . The CVSS 3.1...

CVE-2026-25281 Allocation of Resources Without Limits or Throttling in OOBM

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...

CVE-2026-25281 Allocation of Resources Without Limits or Throttling in OOBM

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...

EUVD-2026-81328

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...

CVE-2025-59607 Untrusted Pointer Dereference in Windows Compute

Memory Corruption when copying large input data exceeds normal allocation limits...

EUVD-2025-210926

Memory Corruption when copying large input data exceeds normal allocation limits...

PT-2026-95186

Name of the Vulnerable Software and Affected Versions O-RAN-SC SMO OAM version 2025-06-10 Description An issue exists within an unknown functionality of the VES Collector component. A remote attacker can perform a manipulation that leads to the allocation of resources. Recommendations At the...

PT-2026-94529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ublk shmem remove ranges function where a teardown retry loop can occur due to an xarray allocation failure. The function attempts to store ranges into a temporary...

CVE-2026-93104: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rvt: Return NULL after port allocation failure rvtallocdevice deallocates the IB device when its port array cannot be allocated but then returns the pointer to the released allocation. Callers treat any non-NULL value as val...

PT-2026-94644

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cpufreq imx6q driver where imx6 soc volt is allocated using devm kcalloc against the CPU device obtained from get cpu device0. Because this CPU device is never...

CVE-2026-93118: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeedudc: check endpoint DMA allocation astudcprobe allocates a coherent DMA buffer used as the backing store for endpoint buffers. astudcinitep derives per-endpoint buffer pointers from udc-ep0buf, so a failed...

CVE-2026-90412: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmetexecutegetlogpagermi leaves 'status' holding NVMESCSUCCESS set by the successful nvmetreqfindns call when the kzalloc for the log buffer fails. It then jumps to...