CVE-2026-129480

The Assimp library versions through 6.0.6 are vulnerable to a heap out-of-bounds read in the MD2Importer::InternReadFile function. The root cause is an unvalidated stored frameSize header field within the .md2 file format. An attacker can provide a specially crafted .md2 file with a non-zero keyf...

EUVD-2026-80810

RabbitMQ amqp091-go: Resource Exhaustion OOM via Unbounded Body Buffer Allocation...

CVE-2026-77410

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates the message body slice with the uint64 ch.header.Size value supplied by an AMQP content header without capping the allocation to the negotiated Connection.Config.FrameSize value. A...

Denial Of Service (DoS)

audify is vulnerable to Denial Of Service DoS. The vulnerability is due to frameSize not being checked for negative values when provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions, which can lead to a process crash...

CVE-2024-21522

All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...