Lucene search
+L

16328 matches found

Cvelist
Cvelist
•added 2026/03/18 10:05 a.m.•51 views

CVE-2025-71265 fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attrloadrunsrange on inconsistent metadata We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service DoS condition. A malformed NTFS image can cause an infinite lo...

0.00129EPSS
SaveExploits0References7
NVD
NVD
•added 2026/03/18 4:17 a.m.•19 views

CVE-2026-32256

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Version 11.12.3 fixe...

7.5CVSS0.00507EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/18 3:22 a.m.•10 views

CVE-2026-32256 music-metadata has an infinite loop vulnerability in ASF parser

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Version 11.12.3 fixe...

7.5CVSS5.8AI score0.00507EPSS
SaveExploits0References2
Mend
Mend
•added 2026/03/18 3:22 a.m.•22 views

CVE-2026-32256

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser "parseExtensionObject" in "lib/asf/AsfParser.ts:112-158" enters an infinite loop when a sub-object inside the ASF Header Extension Object has "objectSize = 0". Version 11.12....

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/03/18 3:22 a.m.•12 views

CVE-2026-32256

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Version 11.12.3 fixe...

7.5CVSS5.9AI score0.00507EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/03/18 3:22 a.m.•53 views

CVE-2026-32256 music-metadata has an infinite loop vulnerability in ASF parser

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Version 11.12.3 fixe...

7.5CVSS0.00507EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/03/18 3:22 a.m.•22 views

CVE-2026-32256 music-metadata has an infinite loop vulnerability in ASF parser

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Version 11.12.3 fixe...

7.5CVSS5.9AI score
SaveExploits0References4
CVE
CVE
•added 2026/03/18 3:22 a.m.•32 views

CVE-2026-32256

CVE-2026-32256 affects the music-metadata library in the ASF parser path (parseExtensionObject in lib/asf/AsfParser.ts). Before version 11.12.3, if a sub-object inside the ASF Header Extension Object has objectSize = 0, the parser can enter an infinite loop, causing an application hang. Version 1...

7.5CVSS5.8AI score0.00507EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2026/03/18 12:00 a.m.•22 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the ATTRLIST attribute of zero size, potentially triggering an infinite loop and leading to a...

5.5CVSS5.9AI score0.00129EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/03/18 12:00 a.m.•23 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an infinite loop in the attrloadrunsrange function when metadata is inconsistent. This vulnerability...

5.5CVSS5.9AI score0.00129EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/18 12:00 a.m.•5 views

CVE-2026-32256: Loop with Unreachable Exit Condition

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Version 11.12.3 fixe...

7.5CVSS5.9AI score0.00507EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/18 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2025-71266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: ntfs3: check return value of indxfind to avoid infinite loop We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service DoS...

5.5CVSS5.9AI score0.00129EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/18 12:00 a.m.•3 views

CVE-2025-71265: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attrloadrunsrange on inconsistent metadata We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service DoS condition. A malformed NTFS image can cause an infinite lo...

5.5CVSS5.9AI score0.00129EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/18 12:00 a.m.•3 views

CVE-2025-71266: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indxfind to avoid infinite loop We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service DoS condition. A malformed dentry in the ntfs3 filesystem can cause the...

5.5CVSS5.8AI score0.00129EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/18 12:00 a.m.•3 views

CVE-2025-71267: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTRLIST We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service DoS condition. A malformed NTFS image can cause an infinite loop when an...

5.5CVSS5.8AI score0.00129EPSS
SaveExploits0References9
osv_go
osv_go
•added 2026/03/17 8:58 p.m.•25 views

GO-2026-4526 Infinite loop in github.com/antchfx/xpath

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

7.5CVSS7AI score0.00722EPSS
SaveExploits1References3
Snyk
Snyk
•added 2026/03/17 8:58 p.m.•11 views

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop due to the logicalQuery.Select process. An attacker can cause excessive CPU consumption and denial of service by submitting specially crafted Boolean XPath expressions that always evaluate to true, such as "1=1" or "true"...

8.7CVSS6.9AI score0.00722EPSS
SaveExploits1References3
Snyk
Snyk
•added 2026/03/17 8:04 p.m.•19 views

Infinite loop

Overview music-metadata is a Music metadata parser for Node.js, supporting virtual any audio and tag format. Affected versions of this package are vulnerable to Infinite loop through the parseExtensionObject process in the ASF parser when handling a sub-object with objectSize = 0. An attacker can...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2026/03/17 8:04 p.m.•30 views

GHSA-V6C2-XWV6-8XF7 music-metadata has an infinite loop vulnerability in ASF parser

Summary music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Root Cause When objectSize is 0: 1. remaining = 0 - 24 = -24 2. tokenizer.ignore-24 moves the read position...

7.5CVSS6AI score0.00507EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/03/17 8:04 p.m.•23 views

music-metadata has an infinite loop vulnerability in ASF parser

Summary music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Root Cause When objectSize is 0: 1. remaining = 0 - 24 = -24 2. tokenizer.ignore-24 moves the read position...

7.5CVSS6AI score0.00507EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder