5266 matches found
netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak
A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...
netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending specially crafted Redis payloads across multiple connections without proper termination. This can exhaust the server's direct memory pool, leading to a Denial of Service DoS condition where legitima...
netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending a specially crafted Redis payload containing deeply nested arrays. This action forces the server to allocate a large number of state objects and collections, leading to memory exhaustion...
maven:3.8 security update
apache-commons-cli 1.5.0-5 - Rebuild to regenerate auto-requires 1.5.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora37MassRebuild 1.5.0-3 - Rebuilt for java-17-openjdk as system jdk 1.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora36MassRebuild 1.5.0-1 - Update to upstream versi...
CVE-2026-64041
The issue CVE-2026-64041 affects the Linux kernel ASoC fs210x codec driver. In fs210x_effect_scene_info(), a string is copied with strscpy using strlen(SRC) + 1 (DST) instead of a bound-limited size, enabling a potential buffer overflow when strlen(SRC) >= sizeof(DST). The fix uses correct bou...
CVE-2026-64041 ASoC: codecs: fs210x: fix possible buffer overflow
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210xeffectsceneinfo, a string was copied like this: strscpyDST, SRC, strlenSRC + 1; A buffer overflow would happen if strlenSRC = sizeofDST. Actually, strscpy must be used...
EUVD-2026-45614
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210xeffectsceneinfo, a string was copied like this: strscpyDST, SRC, strlenSRC + 1; A buffer overflow would happen if strlenSRC = sizeofDST. Actually, strscpy must be used...
PT-2026-61358
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC codecs fs210x component where a buffer overflow can occur within the fs210x effect scene info function. The flaw is caused by the incorrect use of the strscpy...
qt: Qt: Denial of Service via out-of-bounds read in text codec handling
A flaw was found in Qt, a popular software development framework. This vulnerability, an out-of-bounds read, occurs in the QTextCodec::codecForName function when it processes specially crafted input that is not properly terminated. An attacker could exploit this to cause the application to select...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4651 more potentially affected by CVE-2026-44891 via io.netty:netty-codec-stomp (>=4.1.0.beta1, <=4.1.135.final)
io.netty:netty-codec-stomp MAVEN version =4.1.0.beta1, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =5.1.0, =2.0.21, =2.0.28 and more Source cve...
ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +918 more potentially affected by CVE-2026-44891 via io.netty:netty-codec-stomp (>=4.2.0.alpha1, <=4.2.15.final)
io.netty:netty-codec-stomp MAVEN version =4.2.0.alpha1, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-stomp and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...
Oracle Linux 9 : maven:3.9 (ELSA-2026-38500)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38500 advisory. aopalliance 0:1.0-49 - Update javapackages test plan to f42 0:1.0-40 - Rebuilt for https://fedoraproject.org/wiki/Fedora41MassRebuild 0:1.0-39 - Rebuilt for...
netty-codec-http Arbitrary HTTP Request Injection
The vulnerability of the netty-codec-http module in the framework for developing network applications, servers, and clients using the Netty protocol is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTTP requests...
Huawei HarmonyOS Image Codec Module Out-of-Bounds Read Vulnerability
Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. The Huawei HarmonyOS’s media coding and decoding module contains a out-of-bounds read vulnerability, which allows attackers to...
Huawei HarmonyOS Image Codec Module Out-of-Bounds Reading Vulnerability
Huawei HarmonyOS is an operating system. The image codec module of Huawei HarmonyOS has a out-of-bounds read vulnerability, which stems from insufficient validation of input data. Attackers can exploit this vulnerability to compromise the confidentiality of services...
Huawei HarmonyOS Image Codec Module Out-of-Bounds Reading Vulnerability (CNVD-2026-29425)
Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. The Huawei HarmonyOS’s media coding and decoding module contains a out-of-bounds read vulnerability, which allows attackers to explo...
CVE-2026-58553
Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-58551
Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...