CVE-2026-88341: Reachable Assertion

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...

ROS-20260922-73-0105

The vulnerability in the 389-ds-base is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-97027

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration num buffers=0 that triggers an assertion failure in yr arena get ptr, causing the application to terminate...

ROS-20260922-73-0008

The vulnerability in gstreamer1-plugins-bad-free is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0010

The vulnerability in gstreamer1-plugins-good is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0028

The vulnerability in gstreamer1-plugins-ugly is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0136

The vulnerability in the Systemd service initialization and management subsystem is related to insecure handling of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0078

The vulnerability in Tomcat is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0079

The vulnerability in Tomcat10 is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0080

The vulnerability in Tomcat11 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0084

The vulnerability in Tomcat is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260922-73-0085

The vulnerability in Tomcat10 is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...

Reachable Assertion

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Reachable Assertion via an assertion failure in NixlBaseConnectorWorker.applyprefixcaching, which fails to properly validate block counts across...

PYSEC-2026-4005

vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...

CVE-2026-94623 vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure

vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...

CVE-2026-94623 vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure

vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...

CVE-2026-94623

vLLM through version 0.29.0 is affected by a denial of service vulnerability in the NIXL connector's prefix caching implementation. The root cause is a failure to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. An unauthenticated...

CVE-2026-94623 vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure

vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...

EUVD-2026-84178

The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...