CVE-2026-30067

A vulnerability in the complexQueryFilterSubprocess function within the NRF Discovery service of free5gc v4.0.1 allows an unauthenticated remote attacker to trigger a Denial of Service (DoS) via a crafted input. The CVSS 3.1 score is 7.5 (High) , with the attack vector being network-based, low co...

CVE-2026-38347

A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg (git-master commit 722a217) allows a remote attacker to trigger a Denial of Service by supplying a crafted input, causing the application to crash or become unresponsive. The vulnerability is scored CVSS 7.5...

CVE-2026-30058

CVE-2026-30058 affects free5gc v4.0.1 , an open-source 5G core implementation. The HTTPModifySubscription handler contains an Improper Input Validation flaw that allows a remote, unauthenticated attacker to trigger a Denial of Service by sending a crafted input. The vulnerability is scored CVSS 3...

CVE-2026-30070

free5gc v4.0.1 is affected by a Denial of Service vulnerability in the HandleGetSharedData function, which can be triggered by a crafted input. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network-based attack with low complexity , no privileges required , and no user interaction , resulting i...

EUVD-2026-67118

An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30070

An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30067

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38345

A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg (affecting version N-122528-gdd2976b9e1) allows a remote attacker to cause a Denial of Service by supplying a specially crafted input, leading the application to become unresponsive or cras...

CVE-2026-38345

A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38350

An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-30063

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

CVE-2026-30058

Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38347

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82759

A Division-by-Zero vulnerability in the ff sws init single context function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30063

CVE-2026-30063 affects the NF Discovery endpoint of free5gc v4.0.1 , an open-source 5G Core implementation. An unauthenticated, remote attacker can trigger a Denial of Service by sending a crafted snssais query to this endpoint. The vulnerability is rated CVSS 7.5 (HIGH) with a vector of AV:N/AC:...

EUVD-2026-67119

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

CVE-2025-10903

GitLab EE is affected by an unbounded loop (infinite loop) in the SCIM user provisioning feature , allowing an authenticated user to trigger a denial of service via specially crafted input. The vulnerability affects all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1...

CVE-2026-38754

A flaw was found in Busybox. This vulnerability, a heap overflow, exists within the ifsbreakup function. A remote attacker could exploit this by providing specially crafted input, leading to a Denial of Service DoS condition. This means the affected system or application could become unavailable ...