DEBIAN-CVE-2026-59903

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a caching proxy or CDN to reuse...

CVE-2026-59902 Netty: Memory Exhaustion in SctpMessageCompletionHandler

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with...

CVE-2026-59902 Netty: Memory Exhaustion in SctpMessageCompletionHandler

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with...

CVE-2026-58561

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58560

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58561

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58561

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60069

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58561

CVE-2026-58561 is a null pointer dereference in the image codec module that can impact availability. The CVSS 3.1 vector (LOCAL, LOW complexity, NO user interaction, NONE privileges, UNCHANGED scope) yields a MEDIUM base score (4.0) with availability impact set to LOW; exploitation appears to req...

EUVD-2026-60068

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58560

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58560

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58560

Technical details about CVE-2026-58560 are not publicly available in the provided documents. Monitor for updates from Huawei and the CVE entry for further information.

CVE-2026-74295

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdachdmi: Validate written enum value hdachdmisetpinportmux uses the written enum value to index the texts array before calling sndsocdapmputenumdouble, which validates that the value is within the enum item range. ...

CVE-2026-74300

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a sequence of capability elements. Each element starts with a one-byte length followed by that many payload bytes...

CVE-2026-74295

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdachdmi: Validate written enum value hdachdmisetpinportmux uses the written enum value to index the texts array before calling sndsocdapmputenumdouble, which validates that the value is within the enum item range. ...

UBUNTU-CVE-2026-74300

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a sequence of capability elements. Each element starts with a one-byte length followed by that many payload bytes...

UBUNTU-CVE-2026-74294

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with sndsocenumitemtoval before checking whether the value is valid for the enumeration. Reject...

UBUNTU-CVE-2026-74295

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdachdmi: Validate written enum value hdachdmisetpinportmux uses the written enum value to index the texts array before calling sndsocdapmputenumdouble, which validates that the value is within the enum item range. ...

EUVD-2026-59447

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a sequence of capability elements. Each element starts with a one-byte length followed by that many payload bytes...