16013 matches found
CVE-2026-45820
fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...
EUVD-2026-47616
fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
CVE-2026-64834: Loop with Unreachable Exit Condition
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...
PT-2026-63549
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description The Bzip2Decoder handler in the compression codec pipeline is susceptible to a denial-of-service attack. A malformed bzip2 stream can trigger an infinite lo...
PT-2026-63328
Name of the Vulnerable Software and Affected Versions fflate versions prior to 0.8.3 Description A denial of service occurs due to an infinite loop in the unzipSync function. This happens when processing a specially crafted ZIP archive where a central directory entry declares compressed size as...
CVE-2026-45820: Loop with Unreachable Exit Condition
fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...
PT-2026-85148
fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressed size=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...
CVE-2026-63969
A flaw was found in the Linux kernel's IPv6 networking subsystem. A local attacker could trigger an infinite loop within the rt6fillnode function. This occurs when a writer removes an entry from a list without proper synchronization, causing a softirq-side process to continuously loop. The...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
EUVD-2026-46384
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93222 CVE-2026-56852 affecting package kubernetes for versions less than 1.30.10-27
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93105 CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93141 CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-11
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93174 CVE-2026-56852 affecting package etcd for versions less than 3.5.33-1
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93165 CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93213 CVE-2026-56852 affecting package kata-containers-cc for versions less than 3.15.0.aks0-16
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93087 CVE-2026-56852 affecting package kata-containers-preview 3.27.0~preview2-2
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...