zip: AES Entry HMAC Authentication Bypass on Premature EOF

Summary An AES-encrypted AE-x entry's authentication code is verified only when the reader's byte counter lands exactly on zero. If the bounded entry reader reaches the archive's actual EOF before the attacker-controlled, header-declared compressedsize, the counter remains positive, the HMAC is...

GHSA-8HXF-QR8P-62X4 zip: AES Entry HMAC Authentication Bypass on Premature EOF

Summary An AES-encrypted AE-x entry's authentication code is verified only when the reader's byte counter lands exactly on zero. If the bounded entry reader reaches the archive's actual EOF before the attacker-controlled, header-declared compressedsize, the counter remains positive, the HMAC is...

CVE-2024-44947

CVE-2024-44947 Description : In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fusenotifystore, unlike fusedoreadpage, does not enable page zeroing because it can be used to change partial page contents. So...

CVE-2026-98974

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

CVE-2026-98974

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

CVE-2026-98974

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

EUVD-2026-108768

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

PT-2026-121951

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFS IOC EXCHANGE RANGE's TO EOF flag. The bug tricks exchange-range into modifying a file so that it...

CVE-2026-113794 pypdf: Possible infinite loop when hitting EOF in standard xref table

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0...

CVE-2026-113794 pypdf: Possible infinite loop when hitting EOF in standard xref table

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0...

CVE-2026-113794

The pypdf pure-python PDF library is vulnerable to an infinite loop (CWE-835) in versions prior to 6.20.0 . An attacker can trigger this by crafting an incomplete PDF that ends prematurely inside a standard cross-reference table , causing the library to mishandle the unexpected end of file. This ...

CVE-2026-113794 pypdf: Possible infinite loop when hitting EOF in standard xref table

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0...

CVE-2026-106565

A flaw was found in ImageMagick. A remote attacker could trigger a Denial of Service DoS by providing a specially crafted bzip2-compressed image file. Due to a missing End-of-File EOF check during image decompression, the application can enter an infinite loop, exhausting system resources and...

PT-2026-107547

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 ImageMagick versions prior to 6.9.13-57 Description A missing end-of-file check occurs when reading bzip2-compressed image data, which can lead to an infinite loop and the exhaustion of processing...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1785515860)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785515860 advisory. - When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making archive...

CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.4:CLSA-2026:1786609534)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1786609534 advisory. - When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making archive...

CentOS Linux 8.5 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.5:CLSA-2026:1785456223)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1785456223 advisory. - When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making archive...

CVE-2026-98127

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3insertrange does not check if the new file size isize + len is valid. This allows FALLOCFLINSERTRANGE to bypass RLIMITFSIZE, exceed smaxbytes, or produce a size outside the lofft...

CVE-2026-98126

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOCFLZERORANGE is used without FALLOCFLKEEPSIZE, smb3zerorange may extend EOF without checking RLIMITFSIZE, allowing the file to grow beyond the caller's file-size limit. Fix th...

Linux Distros Unpatched Vulnerability : CVE-2026-93235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to zero post-EOF data when extending file size generic/794 4s ... - output mismatch see /share/git/fstests/results//generic/794.out.bad ---...