2085 matches found
CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
CVE-2026-87910
CVE-2026-87910 affects Python's tarfile module. When extracting a hardlink on a system without link support, tarfile falls back to extracting the referenced member from the archive. During this fallback, the extraction filter function is invoked twice—once for the extracted member and once with t...
SUSE CVE-2026-89156
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
CVE-2026-89156
A flaw was found in PCRE2. An attacker can provide invalid UTF Unicode Transformation Format data, leading to an out-of-bounds read during a Just-In-Time JIT fallback. This vulnerability could potentially result in a denial of service. Mitigation Mitigation for this issue is either not available ...
CVE-2026-89156
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
AZL-101820 CVE-2026-89156 affecting package rust 1.96.1-1
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
AZL-101754 CVE-2026-89156 affecting package nmap 7.95-5
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
AZL-100065 CVE-2026-89156 affecting package pcre2 for versions less than 10.48-1
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
AZL-101796 CVE-2026-89156 affecting package qtbase 6.6.3-5
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
AZL-101808 CVE-2026-89156 affecting package rust 1.75.0-31
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
DEBIAN-CVE-2026-89156
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
UBUNTU-CVE-2026-89156
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
CVE-2026-89156
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
CVE-2026-89156
PCRE2 before 10.48 contains an out-of-bounds read in pcre2_match that triggers after a JIT fallback when an attacker supplies invalid UTF data . Red Hat notes the vulnerability could result in a denial of service . NVD scores it 5.9 (Medium) with a network vector but high attack complexity and no...
EUVD-2026-75942
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
CVE-2026-89156
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
CVE-2026-89156
PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...
