5539 matches found
EEF-CVE-2026-59696 uri_string does not bound the port component of a URI before integer conversion
Summary Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length...
EEF-CVE-2026-71562 httpc does not bound server-supplied numeric header values before integer conversion
Summary Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpchandler.erl converts the server-supplied...
CVE-2026-71562 httpc does not bound server-supplied numeric header values before integer conversion
Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpchandler.erl converts the server-supplied Content-Length wit...
CVE-2026-71562
Erlang/OTP inets httpc contains an improper validation flaw where server-supplied Content-Length and Retry-After header values are converted via unbounded list_to_integer/1 before size checks can apply. A malicious HTTP server can return a numeric header with up to roughly 1.26 million digits , c...
CVE-2026-71562 httpc does not bound server-supplied numeric header values before integer conversion
Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpchandler.erl converts the server-supplied Content-Length wit...
CVE-2026-71562 httpc does not bound server-supplied numeric header values before integer conversion
Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpchandler.erl converts the server-supplied Content-Length wit...
[SECURITY] [DLA 4765-1] expat security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4765-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura August 31, 2026 https://wiki.debian.org/LTS -...
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly process a buffered character without consuming further input, leading to a...
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
Debian dla-4765 : expat - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4765 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4765-1 [email protected]...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`
A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...
CVE-2026-75145
A flaw was found in FFmpeg. An incorrect integer narrowing conversion in the AV1 RTP packetizer can lead to an out-of-bounds memory access. This occurs when processing specially crafted AV1 RTP Real-time Transport Protocol packets, where a large OBU Operating Block Unit size is incorrectly handle...
Elixir -- Denial of service via uncontrolled recursion in charlist conversion
tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 exhaust a BEAM node's memory. Inspect.List checks only a bounded prefix 4096 elements by default to determine whether a list is a...
Elixir -- Denial of service via uncontrolled recursion in charlist conversion
tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 exhaust a BEAM node's memory. Inspect.List checks only a bounded prefix 4096 elements by default to determine whether a list is a...
CVE-2026-63384
A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...
CVE-2026-80489
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly process a buffered character without consuming further input, leading to a...
CVE-2026-47856
Spring Integration's JSON to object conversion uses the jsonTypeId header to choose the deserialization target type, and resolves that header value to a class with ClassUtils.forName and no type/package allow-list. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0...
CVE-2026-59187
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 are vulnerable to a heap out-of-bounds write when exrmetrics reads a crafted deep scanline EXR. This occur...