GHSA-JRMC-QG6P-94FP veraPDF Parser DoS via PostScript CMap Streams

Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 0 font /Encoding or any /ToUnicode is a CMap stream containing attacker-supplied PostScript. veraPDF...

CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

UBUNTU-CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

UBUNTU-CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

CVE-2026-64834

A flaw was found in FFmpeg. A remote attacker can exploit an infinite loop vulnerability in the RTP/ASF demuxer by sending a specially crafted stream. This vulnerability occurs because the rtpasffixheader function does not properly validate the size of data chunks, preventing the processing loop...

CVE-2026-67214

CVE-2026-67214 (nanoid) affects the Nano ID package prior to 5.1.16, specifically the non-secure module (nanoid/non-secure). The vulnerability is an infinite loop in the customAlphabet and nanoid functions when given a negative size, causing the loop counter to decrement from a negative value and...

CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

CVE-2026-67214 nanoid Infinite Loop via Negative Size in non-secure module

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

CVE-2026-67214

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

EUVD-2026-50326

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

CVE-2026-67214

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

CVE-2026-67214 nanoid Infinite Loop via Negative Size in non-secure module

nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...

CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

CVE-2026-67213 nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

CVE-2026-67213

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

EUVD-2026-50325

nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...

CVE-2026-67213

CVE-2026-67213 (nanoid) affects Nano ID before 5.1.6. A bug in the customAlphabet and customRandom functions can enter an infinite loop when configured with a size of 0, causing the generation loop to spin and hang the calling thread. This creates a denial-of-service condition if an attacker can ...