97351 matches found
UBUNTU-CVE-2026-108063
A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...
CVE-2026-104113 Double free in OmniOS and SmartOS ipmgmtd allows local users to crash the daemon
A double free in the IP management daemon ipmgmtd of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c frees the caller's credential with ucredfree...
EUVD-2026-95799
A double free in the IP management daemon ipmgmtd of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c frees the caller's credential with ucredfree...
CVE-2026-108063
A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...
CVE-2026-108105 Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request
Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...
CVE-2026-108105
The Open5GS software (versions through 2.8.0 ) is vulnerable to a reachable assertion vulnerability within the mme_gn_handle_sgsn_context_request() function. A remote unauthenticated attacker can exploit this by sending malformed SGSN Address IEs via GTPv1-C traffic from a configured SGSN address...
CVE-2026-108105 Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request
Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...
CVE-2026-108103 Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE
Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsedroppeddltrafficthreshold that allows remote unauthenticated attackers to read past IE buffers via short IEs. Attackers can send PFCP Session Establishment or Modification Requests to the UPF on UDP port 8805 wi...
EUVD-2026-95391
Strawberry legacy graphql-ws retains naturally completed subscription slots...
GHSA-M952-2W3F-6R8H Strawberry legacy graphql-ws retains naturally completed subscription slots
Summary Strawberry's legacy graphql-ws subscription handler can retain task and subscription bookkeeping after a one-shot subscription has naturally sent its complete message. When the application configures maxsubscriptionsperconnection, the handler counts those completed operations in...
CVE-2026-108063 Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry
A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...
CVE-2026-108063
A null pointer dereference vulnerability exists in libhangul within the hanja_new() function. The flaw occurs because the library fails to verify that a Hanja dictionary entry contains a valid value alongside its key when parsing files. An attacker can provide a specially crafted dictionary file ...
CVE-2026-107386
A flaw was found in amqp091-go. A malicious server or remote peer can cause a Denial of Service DoS by sending a crafted frame header declaring an excessively large payload size during initial connection setup. This flaw causes the client to allocate large amounts of memory before validating the...
CVE-2026-107635
A flaw was found in dislocker. An integer underflow vulnerability in metadata parsing functions can lead to a Denial of Service DoS by crashing the application. By providing a maliciously crafted BitLocker volume image with an invalid datum size, an attacker can trigger an out-of-bounds memory...
CVE-2026-106431
A flaw was found in mongo-c-driver. An off-by-one error in the BSON bulk document writer allows an attacker to cause a Denial of Service DoS or memory corruption. By supplying documents of a specific cumulative size that align with a buffer boundary, an attacker can trigger a single-byte...
Security Bulletin: Security vulnerability in Java affects IBM Robotic Process Automation
Summary A security vulnerability in Java affects IBM Robotic Process Automation. Java is used by IBM Robotic Process Automation as part of its deployment. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS...
CVE-2026-106433
A flaw was found in libmongocrypt. This vulnerability allows an authenticated attacker with permissions to modify key vault documents, or a malicious server returning crafted documents, to cause process memory corruption or a Denial of Service DoS by crashing the application. The issue occurs...
CVE-2026-98218
A flaw was found in the Linux kernel's I2C Address Translator ATR component. When an adapter fails to register, the driver frees the channel memory without clearing its reference pointer, leaving a dangling pointer. A local user could exploit this flaw during cleanup routines to trigger a...
CVE-2026-98217
A flaw was found in the Linux kernel's mlx4 InfiniBand driver that can result in a Denial of Service DoS. When device registration encounters an error during setup, the driver frees memory objects associated with partition key interfaces but retains their references. A subsequent device cleanup...
CVE-2026-98222
A flaw was found in the Linux kernel's encrypted keys subsystem. An integer overflow occurs during memory size calculations for key data, resulting in an undersized buffer allocation. A local user can exploit this issue by supplying crafted key data to trigger an out-of-bounds write to kernel...