SUSE CVE-2026-66036

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vfhqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the...

CVE-2026-66036 FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vfhqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the...

Wireshark 2.2.x < 2.2.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.13 advisory. - In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was address...

ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices

Affected Crate: ml-dsa Affected Versions: v0.1.0-rc.2 and commits since b01c3b7 Severity: Medium Reporter: Oren Yomtov Fireblocks Summary The ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicate hint indices. According ...

CVE-2026-24850 ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices

The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...

CVE-2026-24850

The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...

EUVD-2025-117305

Malicious code in increasing-beige-mongoose npm...

EUVD-2025-117304

Malicious code in increasing-salmon-wolf npm...

EUVD-2025-91138

Malicious code in increasingpeafowlz3n npm...

EUVD-2025-74541

Malicious code in increasingperchwhite-2 npm...

EUVD-2025-76577

Malicious code in increasingcoral-appteadev npm...

EUVD-2025-76578

Malicious code in increasingangelfish-appteadev npm...

EUVD-2025-79038

Malicious code in increasingcoralz3n npm...

EUVD-2025-81575

Malicious code in increasingwhale0xrequest npm...

EUVD-2025-81576

Malicious code in increasingclownfish0xrequest npm...

EUVD-2025-63569

Malicious code in increasingpheasantz3n npm...

MAL-2025-94980 Malicious code in increasing_cockroach_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4716b6c0d5aea770e0b7f0c8768a35abdd452455fc6439ce9c640c4176601209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63572

Malicious code in increasinglandfowlz3n npm...

EUVD-2025-53799

Malicious code in increasing-cyan-marmoset npm...

MAL-2025-68856 Malicious code in increasing-scarlet-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b3738d2bd0684aff7720ce225cda9158168767c1dd93b325f9037d4426b8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...