16930 matches found
CVE-2026-123273
Versions of ImageMagick before 7.1.2-35 and 6.9.13-60 are vulnerable to an infinite loop within the SVG decoder . The root cause is located in QueueAuthenticPixelCacheNexus in MagickCore/cache.c , which fails to validate the requested region's width and height. An attacker can provide a crafted S...
CVE-2026-110931
A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. The issue occurs when the parser handles a specific element called AuthorityBinding within an authentication statement. Due to an incomplete fix for a previous vulnerability, the parser...
CVE-2026-107602
A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution. The issue occurs when the parser encounters unexpected elements within a security token's key information section, causing the processing thread to enter an infinite loop. An...
EUVD-2026-117566
A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. The issue occurs when the parser handles a specific element called AuthorityBinding within an authentication statement. Due to an incomplete fix for a previous vulnerability, the parser...
CVE-2026-110931
A flaw exists in the Keycloak SAML 1.1 assertion parser, specifically when processing the AuthorityBinding element within an authentication statement. Due to an incomplete fix for a prior vulnerability, the parser can enter an infinite loop that exhausts all available memory. This results in an u...
CVE-2026-107602
A flaw exists in the SAML 1.1 XML parsing logic of Keycloak , an open-source identity and access management solution. When the parser encounters unexpected elements within a security token's key information section , the processing thread enters an infinite loop . An unauthenticated remote attack...
EUVD-2026-117565
A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution. The issue occurs when the parser encounters unexpected elements within a security token's key information section, causing the processing thread to enter an infinite loop. An...
CVE-2026-33969
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service...
CVE-2026-33969
A vulnerability exists in the NAS Authentication Request message decoding procedure due to a missing lower bound check . This flaw causes an infinite loop , resulting in a Denial of Service (DoS) . Specific affected products or software versions are not provided in the documentation. No exploit i...
EUVD-2026-117275
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service...
PT-2026-137348
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service...
CVE-2026-121959
FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocketcontextread that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS closenotify, causing a client thread to spin and consume CPU until...
DEBIAN-CVE-2026-121959
FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocketcontextread that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS closenotify, causing a client thread to spin and consume CPU until...
CVE-2026-121959
FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocketcontextread that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS closenotify, causing a client thread to spin and consume CPU until...
CVE-2026-121959 FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocketcontextread that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS closenotify, causing a client thread to spin and consume CPU until...
EUVD-2026-116959
FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocketcontextread that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS closenotify, causing a client thread to spin and consume CPU until...
CVE-2026-121959 FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocketcontextread that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS closenotify, causing a client thread to spin and consume CPU until...
CVE-2026-121959
FreeRDP versions prior to 3.32.2 are vulnerable to an infinite loop within the websocket_context_read function. The root cause is a failure to correctly handle a zero BIO result when a payload is still outstanding. An attacker controlling a malicious RD Gateway can trigger this by sending a trunc...
CVE-2026-121959 FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocketcontextread that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS closenotify, causing a client thread to spin and consume CPU until...
CVE-2026-121944
A flaw was found in sngrep. This vulnerability allows an attacker to cause a Denial of Service DoS by convincing a user to open a specially crafted packet capture PCAP file. Due to improper validation in the packet reassembly routine, processing malformed Netfilter logging NFLOG data triggers an...