libheif-cve-2026-50142

CVE-2026-50142 — libheif HEIFシーケンスパーサーにおける無制限のヒープ割り当て stsz固定サイズモード 深刻度: 高 CVSS 7.5 アドバイザリ: GHSA-jvmp-j3cw-84mh 修正: コミット a6caa38 by @farindk 修正時間: 1時間未満 概要 1,477バイトの細工されたHEIFファイルが、Boxstsz::parseの固定サイズモードにおけるmaxsequenceframesチェック欠如を介して、Chunk::Chunk内で約7 GBの未チェックのヒープ割り当てを引き起こす。 根本原因 seqboxes.cc:1067 ...

CVE-2026-48095

CVE-2026-48095 7-Zip은 높은 압축률을 제공하는 파일 아카이버입니다. 버전 26.00 이하에는 NTFS 압축 스트림 버퍼의 과소 할당GetCuSize 시프트 UB으로 인한 힙 버퍼 오버플로우 취약점이 존재하며, 공격자가 임의 코드 실행 또는 애플리케이션 크래시를 유발할 수 있습니다. NTFS 핸들러의 CInStream::GetCuSize는 압축 단위 버퍼 크기를 UInt321 = 28 및 CompressionUnit == 4인 조작된 이미지는 지수를 32로 만들어 정의되지 않은 동작을 유발하고 x86/x64에서...

Security Bulletin: IBM Watson Explorer is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-15057)

Summary IBM Watson Explorer contains a vulnerable version of IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2026-15057 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap...

Security Bulletin: IBM Watson Explorer is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-11897)

Summary IBM Watson Explorer contains a vulnerable version of IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2026-11897 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially...

PT-2026-102668

Name of the Vulnerable Software and Affected Versions urllib3 versions 1.10.3 through 2.7.x Description The HTTPResponse.read chunked and HTTPResponse.stream methods can allocate unbounded memory. This occurs because the streaming chunk parser buffers the chunk-size field without a length bound...

PT-2026-102676

Name of the Vulnerable Software and Affected Versions Mediawiki - DataTransfer Extension versions 1.46.0 through 1.46.x Description The Mediawiki - DataTransfer Extension contains a dependency on a vulnerable third-party component that leads to uncontrolled resource consumption, specifically...

CVE-2026-100242: Dependency on Vulnerable Third-Party Component

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

ROS-20260929-73-0188

The vulnerability of the wdtprobe function in the drivers/watchdog/viawdt.c module related to Linux kernel watchdog timer support involves unlimited and unregulated resource allocation. Exploiting this vulnerability could allow a attacker to cause a system failure...

UBUNTU-CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-54873: Allocation of Resources Without Limits or Throttling

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-75804: Allocation of Resources Without Limits or Throttling

Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the...

CVE-2026-75804: Allocation of Resources Without Limits or Throttling

Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the...

CVE-2026-97542

A flaw was found in the Linux kernel's XFS file system. When performing online repair of an allocation group free list AGFL, the kernel fails to check return values during bitmap processing, silently ignoring errors. A local user capable of triggering file system repair operations could cause the...

Allocation of Resources Without Limits or Throttling

Overview ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Address6.isValid method and the Address4 constructor when parsing an oversized input...

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Address6.isValid method and the Address4 constructor when parsing an...

CVE-2026-98002

A flaw was found in the Linux kernel's AMD IOMMU Input-Output Memory Management Unit driver. This flaw allows a local user to cause a Denial of Service DoS or system instability during nested domain allocation. When domain identifiers or memory resources are exhausted, an allocation error value i...

Allocation of Resources Without Limits or Throttling

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unsafe runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are merged into t...

CVE-2026-97507

A flaw was found in the Linux kernel's DM1105 media driver. A local user could cause a Denial of Service DoS through a kernel crash if Direct Memory Access DMA memory allocation fails during device initialization. Because the driver ignores the allocation return value, it proceeds to use a null...

Loki: Loki: Denial of Service via large limit queries

A flaw was found in Loki. A remote attacker can exploit this vulnerability by sending specially crafted queries with large limits, leading to excessive memory allocation. This can cause a Denial of Service DoS by impacting the availability of the Loki service...