16095 matches found
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
CVE-2026-45820: Loop with Unreachable Exit Condition
fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...
PT-2026-63549
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description The Bzip2Decoder handler in the compression codec pipeline is susceptible to a denial-of-service attack. A malformed bzip2 stream can trigger an infinite lo...
PT-2026-85148
fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressed size=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...
CVE-2026-64834: Loop with Unreachable Exit Condition
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...
PT-2026-63328
Name of the Vulnerable Software and Affected Versions fflate versions prior to 0.8.3 Description A denial of service occurs due to an infinite loop in the unzipSync function. This happens when processing a specially crafted ZIP archive where a central directory entry declares compressed size as...
CVE-2026-63969
A flaw was found in the Linux kernel's IPv6 networking subsystem. A local attacker could trigger an infinite loop within the rt6fillnode function. This occurs when a writer removes an entry from a list without proper synchronization, causing a softirq-side process to continuously loop. The...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
EUVD-2026-46384
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93108 CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93267 CVE-2026-56852 affecting package multus for versions less than 4.0.2-10
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93273 CVE-2026-56852 affecting package opa for versions less than 0.63.0-5
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93171 CVE-2026-56852 affecting package docker-compose for versions less than 2.27.0-13
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93111 CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93081 CVE-2026-56852 affecting package cri-o 1.30.1-1
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93219 CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93147 CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93204 CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...