9 matches found
CVE-2026-110257
A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by providing a specially crafted Java class file. Due to missing attribute length validation during class parsing, processing the file triggers excessive memory allocation, exhausting system resources and crashing the...
org.ow2.asm/asm: OW2 ASM: Denial of Service via excessive memory allocation
A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by providing a specially crafted Java class file. Due to missing attribute length validation during class parsing, processing the file triggers excessive memory allocation, exhausting system resources and crashing the...
SUSE-SU-2026:24119-1 Security update for libXi
This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState bsc1281605. - CVE-2026-93542: out-of-bounds read in XI2 class parsing via sizeclasses and copyclasses bsc1281606. - CVE-2026-93543: out-of-bounds read in XI2 class parser bsc1281608. -...
libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension XI2 device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read...
PT-2026-97977
Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs during XI2 class parsing within the size classes and copy classes functions. This flaw allows malicious servers to cause the X client to crash. Recommendations Update libXi...
CLSA-2025-1759222758 ruby: Fix of 4 CVEs
CVE-2016-2337: Fix type confusion in canceleval Ruby's TclTkIp class method to prevent arbitrary code execution - CVE-2017-9224: Fix stack out-of-bounds read in matchat during regular expression searching - CVE-2017-9227: Fix stack out-of-bounds read in mbcenclen and invalid pointer dereference...
joni:RegexMatcherFuzzer: Security exception in org.joni.Parser.parseCharClass
Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=6586455457857536 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: RegexMatcherFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
OESA-2022-1667 nodejs-hawk security update
Hawk is an HTTP authentication scheme using a message authentication code MAC algorithm to provide partial HTTP request cryptographic verification. Security Fixes: Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic...