GHSA-2GQ3-WW97-WFJM ImageMagick has a possible heap Use After Free vulnerability in its meta coder

A heap Use After Free vulnerability exists in the meta coder when an allocation fails and a single byte is written to a stale pointer. ==535852==ERROR: AddressSanitizer: heap-use-after-free on address 0x5210000088ff at pc 0x5581bacac14d bp 0x7ffdf667edf0 sp 0x7ffdf667ede0 WRITE of size 1 at...

DEBIAN-CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

CVE-2025-65995

When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...

Silicon Labs Gecko SDK和Silicon Labs Simplicity SDK 安全漏洞

The Silicon Labs Gecko SDK GSDK and Silicon Labs Simplicity SDK are both open-source products from Silicon Labs. The Silicon Labs Gecko SDK is a library that combines the Silicon Labs wireless software development kit SDK with the Gecko platform into an integrated software package. The Silicon La...

The vulnerability of the Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a hacker to trigger a service failure.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to synchronization errors when using common resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the internal locking mechanism of the MongoDB database management system allows a hacker to trigger a service failure.

The vulnerability of the internal locking mechanism of the MongoDB database management system is related to the locking mechanism with unlimited external access. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerabilities of the React frontend building libraries React-server-dom-parcel, React-server-dom-turbopack, and React-server-dom-webpack allow attackers to cause service failures.

The vulnerability of the React frontend library packages react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack involves uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

Inside Modern API Attacks: What We Learn from the 2026 API ThreatStats Report

API security has been a growing concern for years. However, while it was always seen as important, it often came second to application security or hardening infrastructure. In 2025, the picture changed. Wallarm’s 2026 API ThreatStats Report revealed that APIs are now the primary attack surface fo...

The vulnerability of the MongoDB Query Planner component of the MongoDB database engine allows a hacker to cause a service failure.

The vulnerability of the MongoDB Query Planner component in the MongoDB database lies in its unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of NVIDIA’s graphics driver series—NVS, Quadro, NVIDIA RTX, GeForce—is related to pointer aliasing, which allows attackers to trigger service failures.

The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to trigger service failures...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the cpswnew driver not executing the ndosetrxmode callback in the work queue, potentially leading...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to execute the ndosetrxmode callback in the work queue, potentially leading to...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the osdfault function not resetting the sparse read state. This could lead to state machine error...

The vulnerability in the implementation of the LDAP service protocol on the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the toFixed() function in the JavaScript environment of Rhino allows a malicious actor to cause a service failure.

The vulnerability of the toFixed function in the JavaScript environment of Rhino is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the JSON data processing library Json-smart, related to uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the JSON data processing library Json-smart is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Xerces2 Java XML parser, related to resource management errors, allows attackers to cause service failures.

The vulnerability of the Xerces2 Java XML parser is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending a specially crafted XML message...

The vulnerability of the expand() function in the juliangruber/brace-expansion library of the Node.js software platform allows a malicious actor to cause a service failure.

The vulnerability of the expand function in the juliangruber/brace-expansion library of the Node.js software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the `ntfs_read inode_mount()` function in the `fs/ntfs/inode.c` file of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the ntfsread inodemount function in the fs/ntfs/inode.c file of the Linux kernel file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service failures...