CVE-2026-53716

A flaw was found in Envoy Gateway. A remote attacker, by providing a specially crafted compressed WebAssembly Wasm payload through a tenant-controlled URL, can exploit a vulnerability where the system decompresses the gzip file without limiting the output size. This can lead to an uncontrolled...

Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb)

ImpactDenial of service via memory exhaustion. Affects all callers who streamed compressed responses relying on the chunk size — explicit iterbyteschunksize=... or the default — to bound memory. The decoder ignored that bound, so a chunk could be far larger than requested and a single compressed...

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service

ImpactWho is impacted: - Any application using Zapros to make HTTP requests to untrusted servers - Applications that follow redirects to attacker-controlled hostsAttack vector: - A malicious HTTP server returns a response with many chained content encodings. When the client attempts to decode, it...

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions

SummaryThe audio decode-duration guard maxdurations, env VLLMMAXAUDIODECODEDURATIONS, default 600s that protects against audio decompression-bomb DoS is wired into only the speech-to-text path /v1/audio/transcriptions. The chat audio path /v1/chat/completions, inputaudio content parts calls the...

CVE-2025-55891

CVE-2025-55891: 不正なTIFFファイルによるTIFFCP.EXE（docuPrinter Pro）のヒープ破損 概要 Neevia docuPrinter Pro に同梱されているコマンドラインユーティリティ TIFFCP.EXE には、古く脆弱なバージョンのlibtiff（v3.5.7）を使用していることに起因するヒープ破損の脆弱性が存在します。攻撃者は、特別に細工されたTIFFファイルを供給することで、LZW解凍中にセグメンテーションフォルトを引き起こすことができます。 この問題は、オープンソースのlibtiff 3.5.7からコンパイルされた tiffcp...

CVE-2025-14847---MongoBleed

Mongobleed CVE-2025-14847 – Goによる概念実証 このリポジトリは、CVE-2025-14847 に対するGoによる概念実証エクスプロイトを含んでいます。これは一般に Mongobleed として知られるMongoDBのメモリ開示脆弱性です。 このPoCは、Joe Desimone による元のPythonエクスプロイトをGoで再実装したものです。こちらから入手できます: https://github.com/joe-desimone/mongobleed...

AZL-105378 CVE-2026-103262 affecting package python-tornado 6.3.3-11

Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits...

CVE-2026-103262

Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits...

CVE-2026-103262

A flaw was found in Tornado. A remote malicious server can cause a Denial of Service DoS when an application using the CurlAsyncHTTPClient component fetches an untrusted web address. Because the client fails to enforce limits on incoming response sizes, the attacker can return a small, highly...

cve-2025-14847

MongoBleed: CVE-2025-14847 メモリリーク発見ツール MongoBleed は、CVE-2025-14847 を検出・実証するために設計された高性能なセキュリティ監査ツールです。この脆弱性により、認証されていないリモート攻撃者が、zlib の展開ロジックにおける長さ不一致の欠陥を悪用して、MongoDB サーバーから未初期化のヒープメモリの断片を漏えいさせることができます。 🛡️ 脆弱性の概要 CVE ID: CVE-2025-14847 ステータス: 実環境で活発に悪用されています（2025年12月下旬時点）。 重大度: 高 CVSS 8.7 影響:...

CVE-2026-103262 Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient

Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits...

CVE-2026-103262

Tornado versions before 6.5.9 are vulnerable to a Denial of Service (DoS) attack via the CurlAsyncHTTPClient component. The root cause is an unbounded memory accumulation vulnerability where the client fails to enforce limits on incoming response sizes. A remote malicious server can exploit this ...

CVE-2026-103262 Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient

Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits...

SUSE CVE-2026-98067

In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...

MGASA-2026-0463 Updated python-pillow packages fix security vulnerabilities

Prevent decompression bomb when parsing PDF WindowsViewer.getcommand injection EPS image infinite loop JPEG2000 image memory usage McIdas out-of-bounds OOB read Out-of-bounds OOB read when saving 1 mode TGA images Out-of-bounds OOB write from large RankFilter sizes Out-of-bounds OOB write from...

Updated python-pillow packages fix security vulnerabilities

Prevent decompression bomb when parsing PDF WindowsViewer.getcommand injection EPS image infinite loop JPEG2000 image memory usage McIdas out-of-bounds OOB read Out-of-bounds OOB read when saving 1 mode TGA images Out-of-bounds OOB write from large RankFilter sizes Out-of-bounds OOB write from...

Rocky Linux 10.1 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2026_5063)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20265063 advisory. libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archivereaddata in libarchive CVE-2026-4111 Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: python3.12-urllib3 Multiple Vulnerabilities (crlsa-2026_1226)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261226 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 8 [CIQ] Security Update: python3.11-urllib3 Multiple Vulnerabilities (crlsa-2026_1224)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261224 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 9.6 [TuxCare] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ALMALINUX9.6:CLSA-2026:1770911837)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770911837 advisory. - Scrapy versions up to 2.13.2 are vulnerable to a denial of service DoS attack due to a flaw in its brotli decompression implementation. T...