872771 matches found
PT-2026-134185
Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FAST FLOAT builds, DeSerializeOld invokes ASSERT HOST instead of returning an error, so...
PT-2026-134186
Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC 2D ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32 t values and compares them only with UINT16 MAX, allowing negative values to reach ResizeNoInit. Negative dimensions or a 65535 by 65535 produ...
PT-2026-134196
Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT CLASS STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any destructor path. When the legacy engine is selected,...
CVE-2026-119210
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the ClientMessage.validateLocalFileName check used a regular expression that could match LOAD DATA LOCAL INFILE text inside quoted identifiers, string...
CVE-2026-119276
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, when CLIENTSESSIONTRACK was negotiated, the OkPacket.parse and OkPacket.parseWithInfo paths allocated byte arrays using server-declared lengths for the ...
CVE-2026-119277
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, decoders for OK packet session-state blocks, column definition packets, text row data, or binary row data used server-declared lengths without confirmin...
CVE-2026-119278
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7 and 3.4.5, during cachingsha2password authentication, the authentication-more-data response was treated as a length-encoded byte array, memory was allocated from the...
CVE-2026-119279
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength and ReadableByteBuf.readIntLengthEncodedNotNull methods narrowed the protocol's unsigned 8-byte length-encoded integer to...
CVE-2026-119280
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the MariaDbPoolConnection.recover and MariaDbPoolPinnedConnection.recover implementations trusted the gtridlength and bquallength columns returned by XA...
CVE-2026-119281
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result bytes were UTF-8 but guarded only changes to charactersetclient. It did not reject non-UTF-8 charactersetresults changes an...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl-XML-Parser (UTSA-2026-149760)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-149760 advisory. XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption double free or corruption and crashes. A :utf8 PerlIO...
CGA-77CM-X67G-36FP
Bulletin has no description...
CGA-2VXF-XC7X-QCM7
Bulletin has no description...
CGA-2XH9-H4QX-GGRX
Bulletin has no description...
CGA-R88J-MM4C-XW7F
Bulletin has no description...
CGA-V4VG-QG79-87CQ
Bulletin has no description...
CGA-MMF6-WMHF-5MQ7
Bulletin has no description...
CGA-7QFR-W7JR-JPR2
Bulletin has no description...