28943 matches found
PT-2026-69715
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists when processing a RESET IN REQUEST from a peer. The function sctp process strreset inreq derives the stream count from the parameter length without verifying if the...
Linux Distros Unpatched Vulnerability : CVE-2026-66485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based ...
PT-2026-69334
Name of the Vulnerable Software and Affected Versions keras-team/keras versions prior to 3.15.1 Description A denial of service DoS issue occurs when loading malicious .keras model files using the keras.models.load model function. The H5IOStore. getitem method in keras/src/saving/saving lib.py...
CVE-2026-68291: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: idpf: fix maxvport related crash on allocation error during init Set adapter-maxvports only after successful allocation of vports, netdevs and vportconfig buffers. This fixes possible crashes on reset or rmmod, following failed...
Linux Distros Unpatched Vulnerability : CVE-2026-68242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside wou...
PT-2026-69775
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt aux devices init function calls auxiliary device init before all fields required by bnxt aux dev release are initialized. If an...
CVE-2026-12570: Allocation of Resources Without Limits or Throttling
A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...
CVE-2026-44630: Memory Allocation with Excessive Size Value
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError. Thi...
PT-2026-76519
In all published versions of dcrypt-symmetric before 2.0.0, version-1 GCM and ChaCha20-Poly1305 streams used unauthenticated terminator, counter, and length fields. Decryptors trusted transmitted counters, allocated from unbounded lengths, and discarded plaintext that did not fit a caller's singl...
PT-2026-69304
Name of the Vulnerable Software and Affected Versions Perl versions prior to 5.45.2 Description Out-of-bounds heap reads and writes occur during regular expression matching due to an undersized superlinear cache in the S regmatch function. The regex engine calculates the bit count for the...
SUSE-SU-2026:3535-1 Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:3534-1 Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:3533-1 Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:23172-1 Security update for openssl-3
This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
Memory Allocation with Excessive Size Value
Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the parsing of the /ToUnicode entry of a font with unusually large values. An...
JLSEC-2026-1183 FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption...
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...
kernel: ipc: limit next_id allocation to the valid ID range
A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...
kernel: ipc: limit next_id allocation to the valid ID range
A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...
SUSE-SU-2026:23058-1 Security update for openssl-3
This update for openssl-3 fixes the following issue: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
