tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

CVE-2026-68241: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to n...

PT-2026-69769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb gadget printer component where the printer read function uses a single variable to track both the requested copy size and the actual bytes copied to user space...

Linux Distros Unpatched Vulnerability : CVE-2026-68369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: printer: fix infinite loop in printerread printerread uses the same variable for the requested copy size and the number of bytes actually copied to...

CVE-2026-68369: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: printer: fix infinite loop in printerread printerread uses the same variable for the requested copy size and the number of bytes actually copied to user space. copytouser returns the number of bytes not copied, so wh...

PT-2026-69713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop exists in the tipc nl compat dumpit function. This occurs because the cmd-dumpit callback can return a negative error number, which prevents the whilelen condition from...

CVE-2026-68313: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in tipcnlcompatdumpit cmd-dumpit callback can return a negative errno, causing an infinite loop due to the whilelen condition. As the loop never terminates, genlmutex is never released, and other tasks...

CVE-2026-72522: Out-of-bounds Read

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...

PT-2026-69331

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.8.3 Description An out-of-bounds read and a resulting infinite loop occur during Unicode processing. This happens because low surrogates are treated identically to high surrogates within the toUtf16 functions...

Linux Distros Unpatched Vulnerability : CVE-2026-72522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode...

Linux Distros Unpatched Vulnerability : CVE-2026-68313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix infinite loop in tipcnlcompatdumpit cmd-dumpit callback can return a negative errno, causing an infinite loop due to the whilelen condition. As the lo...

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

...

Denial Of Service

Mermaid is vulnerable to Denial Of Service. The vulnerability is due to an infinite loop in setXAxisRangeData when processing invalid X-Axis parameters, causing array growth that can trigger a RangeError or memory exhaustion and crash the rendering process...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop due to the lack of a limit in the retry mechanism for CPU entropy instructions in the native entropy source. An attacker can cause the application to hang indefinitely by triggering persistent failures in the on-chip entro...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop due to the lack of a limit in the retry mechanism for CPU entropy instructions in the native entropy source. An attacker can cause the application to hang indefinitely by triggering persistent failures in the on-chip entro...

CVE-2026-8798

In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...

CVE-2026-8798: Loop with Unreachable Exit Condition

In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...

EulerOS 2.0 SP11 : expat (EulerOS-SA-2026-3065)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer dereference with...

EulerOS 2.0 SP11 : expat (EulerOS-SA-2026-3120)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer dereference with...

Loop With Unreachable Exit Condition

Apache Thrift is vulnerable to a Loop with Unreachable Exit Condition. The vulnerability is due to an improperly controlled loop condition that can cause the affected Thrift bindings to enter an infinite loop, which allows an attacker to trigger excessive resource consumption...