5349 matches found
CVE-2026-46675
Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression...
PT-2026-102638
Name of the Vulnerable Software and Affected Versions Nicotine+ versions prior to 3.3.11 Description A modified remote client can send zlib-compressed peer messages containing a decompression bomb, which is a malicious archive designed to crash a system by consuming excessive resources during...
CVE-2026-46675
Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression...
UBUNTU-CVE-2026-46675
Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression...
CVE-2026-68911: Improper Handling of Highly Compressed Data (Data Amplification)
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
NPM: undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression
NPM: undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression vulnerability discovered by ? in WordPress Npm undici versions = 6.25.0, 6.28.1...
PDF Memory Exploitation Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Tree::from_data Decompression Bomb
There is a decompression bomb causing memory exhaustion and an OOM kill, denying service to any application that passes attacker-controlled SVG bytes to usvg::Tree::fromdata. The svgz feature is enabled by default, and SVG upload or conversion endpoints that use usvg are typically reachable befor...
PDF Memory Exploitation Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PDF Memory Exploitation Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PDF Memory Exploitation Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
DEBIAN-CVE-2026-98067
In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...
AZL-104828 CVE-2026-98067 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...
CVE-2026-98067
In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...
UBUNTU-CVE-2026-98067
In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...
CVE-2026-98067
The Linux kernel 's erofs filesystem was found to have a broken optimization where LZ4 rolling decompression could compromise data correctness. This occurred because the upstream LZ4 implementation might copy long literals backward on x86 systems, violating the rolling window assumption. To ensur...
CVE-2026-98067
In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...
CVE-2026-98067 erofs: disable LZ4 rolling decompression for now
In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...
EUVD-2026-86720
In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...
CVE-2026-98067 erofs: disable LZ4 rolling decompression for now
In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...