28935 matches found
PT-2026-76519
In all published versions of dcrypt-symmetric before 2.0.0, version-1 GCM and ChaCha20-Poly1305 streams used unauthenticated terminator, counter, and length fields. Decryptors trusted transmitted counters, allocated from unbounded lengths, and discarded plaintext that did not fit a caller's singl...
PT-2026-69304
Name of the Vulnerable Software and Affected Versions Perl versions prior to 5.45.2 Description Out-of-bounds heap reads and writes occur during regular expression matching due to an undersized superlinear cache in the S regmatch function. The regex engine calculates the bit count for the...
SUSE-SU-2026:3535-1 Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:3534-1 Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:3533-1 Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
SUSE-SU-2026:23172-1 Security update for openssl-3
This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
Memory Allocation with Excessive Size Value
Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the parsing of the /ToUnicode entry of a font with unusually large values. An...
JLSEC-2026-1183 FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption...
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...
kernel: ipc: limit next_id allocation to the valid ID range
A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...
kernel: ipc: limit next_id allocation to the valid ID range
A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...
SUSE-SU-2026:23058-1 Security update for openssl-3
This update for openssl-3 fixes the following issue: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
Exploit for CVE-2026-70638
CVE-2026-70638 - llama.cpp LLaMA-Android JNI Integer Overflow...
UBUNTU-CVE-2026-18938
A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...
GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
...
OESA-2026-3287 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: Buffer Overflow...
CVE-2026-67585: Allocation of Resources Without Limits or Throttling
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...
PT-2026-69434
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A signed integer overflow occurs in the file-fli plugin when processing FLI image files. The issue stems from an incorrect calculation during memory allocation for image buffers, where multiplyi...
PT-2026-76900
This update for openssl-3-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...