DigitalBazaar Forge improper exception handling vulnerability

Versions of DigitalBazaar Forge prior to 1.4.1 contain an improper exception handling vulnerability. This vulnerability arises because the TLS client checks for an error attribute when determining whether a server certificate is missing. A malicious TLS server or peer on the path can omit the...

Parse Platform parse-server improper exception handling vulnerability

Versions prior to 8.6.106 and versions 9.0.0 through 9.10.5-alpha.7 of the Parse Platform contain an improper exception handling vulnerability. This vulnerability arises from inadequate handling of null or undefined point notation keys when storing objects; as a result, writes are stored but...

Bytecode Alliance wasmtime improper exception handling vulnerability

The Bytecode Alliance Wasmtime versions prior to 46.0.0 through 48.0.6 and 49.0.0 through 49.0.3 contain an improper exception handling vulnerability. This vulnerability stems from a legacy assertion within component::Func::call that disallows guest exports when asynchronous ABI options are used...

ggml llama.cpp improper exception handling vulnerability

Versions of ggml llama.cpp from b2877 up to and including b11935 contain an improper exception handling vulnerability. This vulnerability arises because the ggml-rpc server fails to catch exceptions; an unauthenticated remote attacker can send a SETTENSOR command with a length exceeding...

RT-Labs p-net improper exception handling vulnerability

Versions prior to RT-Labs p-net 1.0.3 contain an improper exception handling vulnerability. This vulnerability arises when the application has registered a read callback; in such cases, pffspmcmreadind dereferences an empty AR pointer when processing an implicit read request lacking a valid targe...

Bytecode Alliance wasmtime improper exception handling vulnerability

In Bytecode Alliance Wasmtime versions prior to 46.0.0 and between 46.0.0 and 48.0.6, as well as versions between 49.0.0 and 49.0.3, there is an improper exception handling vulnerability. This vulnerability arises because when a guest task has not yet started, cleanup code searches for work items...

Bytecode Alliance wasmtime improper exception handling vulnerability

In Bytecode Alliance Wasmtime versions 49.0.0 through 49.0.3, there is an improper exception handling vulnerability. This vulnerability arises when fused adapters interleave strings such that the source and target are aliases of each other; this can lead to a host crash during string transmission...

Bytecode Alliance wasmtime improper exception handling vulnerability

The Bytecode Alliance Wasmtime versions from 46.0.0 up to and including 48.0.6, as well as versions from 49.0.0 up to and including 49.0.3, contain an improper exception handling vulnerability. This vulnerability arises because pending calls trigger an assertion failure after Store is contaminate...

RT-Labs p-net improper exception handling vulnerability

Versions prior to RT-Labs p-net 1.0.3 contain an improper exception handling vulnerability. This vulnerability arises when processing implicit read requests targeting AR records; if a valid target AR UUID is missing, it dereferences a NULL AR pointer. As a result, remote unauthenticated attackers...

LabStack Echo improper exception handling vulnerability

In LabStack Echo versions 5.0.0 through 5.4.1, there is an improper exception handling vulnerability. This occurs when the capture limit of the BodyDump middleware falls below the BodyLimit threshold; as a result, unknown-length requests are ignored, and any read errors or BodyLimit overflow erro...

Improper handling of exceptions in Tanium Enforce

Versions prior to Tanium Enforce 2.9.736, versions prior to 2.10.778, and versions prior to 3.0.373 contain an improper exception handling vulnerability. This vulnerability stems from null pointer dereferencing and may lead to denial-of-service attacks...

Improper Asterisk exception handling vulnerability

Versions prior to Asterisk 20.20.1, from 21.0.0-pre1 up to versions prior to 21.12.3, from 22.0.0-pre1 up to versions prior to 22.10.1, and from 23.0.0-pre1 up to versions prior to 23.4.1 are affected by an improper exception handling vulnerability. This vulnerability stems from a null pointer...

Improper Qt exception handling vulnerability

Vulnerabilities related to improper exception handling exist in Qt versions 6.8.0 through 6.8.9 and 6.9.0 through 6.11.2. These vulnerabilities stem from the QNetworkAccessManager class in the Qt Network module failing to properly handle scenarios where a malicious or infected HTTP/2 server sends...

Improper handling of exceptions in gssapi gssproxy

GSSAPI and GSSProxy contain a vulnerability related to improper exception handling. This vulnerability arises when GSSProxy dereferences a null pointer during processing of GSSXINITSECCONTEXT requests lacking a targetname field. As a result, unauthenticated local users may cause the GSSProxy daem...

NLnet Labs Routinator improper exception handling vulnerability

Versions of NLnet Labs Routinator prior to 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises when multiple concurrent JSON requests exhaust memory; attackers can exploit it by opening numerous HTTP server connections maliciously. Additionally, a stack overflow...

NLnet Labs Routinator improper exception handling vulnerability

Versions of NLnet Labs Routinator prior to 0.15.3 contain an improper exception handling vulnerability. This flaw arises because incremental entries with gaps in RRDP notification files are still accepted and parsed, potentially leading to data loss. In cases where there are numerous such...

Improper Mattermost exception handling vulnerability

Mattermost versions 11.9 and earlier, 11.1.9 and earlier, 11.5.8 and earlier, and 11.10.7.0 and earlier contain a vulnerability related to improper exception handling. This vulnerability arises from the failure to validate the length of Zoom chat lines prior to slicing them. Authenticated attacke...

NLnet Labs Routinator improper exception handling vulnerability

Versions of NLnet Labs Routinator prior to 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises when the HTTP server exhausts its open connections after receiving a large number of connections without closing them, rendering the HTTP server unavailable and...

vLLM improper exception handling vulnerability

Versions vLLM from 0.11.1 up to but not including 0.32.0 contain an improper exception handling vulnerability. This vulnerability arises because DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR fail to properly handle normalized pixels and zero-valued images within their image paths. When such...

NLnet Labs Routinator improper exception handling vulnerability

Versions of NLnet Labs Routinator prior to 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises when obtaining files via RRDP; the rsync URI includes paths that cannot be stored on disk—such as overly long filenames or folder names that overlap with existing...