CVE-2026-86564

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

CVE-2026-86564

A flaw in DPDK lib/vhost results from missing length validation before reading command_data in the virtio-net control-queue handler , which can cause an out-of-bounds read and a host process crash . The CVSS v3.1 score is 3.3 (LOW) , with a local attack vector, low privileges required, no user in...

CVE-2026-86564 Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

EulerOS 2.0 SP12 : alsa-lib (EulerOS-SA-2026-3322)

According to the versions of the alsa-lib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows...

The vulnerability in the `lib/rhashtable.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the lib/rhashtable.c component of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-86564: Out-of-bounds Read

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

EulerOS 2.0 SP12 : alsa-lib (EulerOS-SA-2026-3247)

According to the versions of the alsa-lib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows...

Linux Distros Unpatched Vulnerability : CVE-2026-86564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio- net control-queue handler can cause an out-of-bounds rea...

CVE-2026-81638: Improper Handling of Alternate Encoding

Improper Handling of Alternate Encoding vulnerability in ash-project ashdoubleentry allows an attacker to submit several distinct string spellings of the same identifier. AshDoubleEntry.ULID renders a 128-bit ULID as 26 Crockford base-32 characters, but the first character encodes only 3 bits, so...

CVE-2026-82752: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in an attribute whose length constraint should bound it. Ash measures string length with Elixir's String.length/1, which counts Unicode graphemes, in the...

The vulnerability of the parseElementStartPart() function in the lib/sax.js file of the XML document access and management module XMLDOM allows a attacker to cause a service failure.

The vulnerability of the parseElementStartPart function in the lib/sax.js file, a module for defining methods to access and manage XML documents, is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

CVE-2026-85600: Improper Neutralization of Input During Web Page Generation

Grav Admin getgrav/grav-plugin-admin2 versions , ", or ', allowing an attacker to register a username containing an HTML payload. When an administrator views a UI surface that renders the username through tHtml—such as the two-factor force-disable confirmation prompt or the 'page is locked' edito...

CVE-2026-71624: Improper Control of Generation of Code

An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controllers/ETMemberController.class.php, and core/lib/ET.class.php components...

The vulnerability of the reg() function in the lib/grammar.js module, a module for defining methods to access and manage XML documents, allows attackers to bypass existing security mechanisms.

The vulnerability of the reg function in the lib/grammar.js module, which is used for accessing and managing XML documents, is related to errors in processing XML requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the lib/grammar.js file, a module for defining access methods to XML documents and managing them with XMLDOM, allows a attacker to cause a service failure.

The vulnerability of the lib/grammar.js file, which is part of the module for determining access methods to XML documents and managing them via XMLDOM, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in lib/parser.js, where the mutually recursive peg$parsevalue, peg$parsearray, and peg$parseinlinetableentry functions recurse to the input's nesting depth with no depth limit. An attacker can crash the process wi...

CVE-2026-63376: Improperly Controlled Modification of Object Prototype Attributes

toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse in lib/compiler.js can be tricked by a table path such as a.b.y.proto.proto, allowing traversal from a scalar value into Number.prototype and Object.prototype. The currentPath tracking value uses both arrays and...

The vulnerability of the reg() function in the lib/grammar.js module, a module for defining methods to access and manage XML documents, allows attackers to bypass existing security mechanisms.

The vulnerability of the reg function in the lib/grammar.js module, which is used for accessing and managing XML documents, is related to errors in processing XML requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the Document.createProcessingInstruction() method in the lib/dom.js module, a module for defining methods for accessing and manipulating XML documents in the XMLDOM framework, allows an attacker to compromise the integrity of the protected information.

The vulnerability of the Document.createProcessingInstruction method in the lib/dom.js module, which is part of the XML document access and manipulation mechanism implemented by XMLDOM, is related to errors in processing XML requests. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the lib/sax.js file, a module for determining the method of accessing and managing XML documents using XMLDOM, allows a attacker to cause a service failure.

The vulnerability of the lib/sax.js file, which is part of the XML document access and management module XMLDOM, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...