Lucene search
+L

24114 matches found

Mend
Mend
•added 2026/07/27 10:56 a.m.•4 views

CVE-2026-43871

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS7.2AI score0.0103EPSS
SaveExploits0References12
CVE
CVE
•added 2026/07/27 10:56 a.m.•122 views

CVE-2026-43871

The CVE-2026-43871 entry describes a vulnerability in Apache Thrift bindings for Python, Go, PHP, and Java caused by an infinite loop due to a loop with an unreachable exit condition in TCompactProtocol varint byte-count handling. Affects Thrift versions before 0.24.0; remedy is upgrading to 0.24...

8.7CVSS7.2AI score0.0103EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/07/27 10:56 a.m.•46 views

CVE-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS0.0103EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/27 10:56 a.m.•13 views

CVE-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS7.2AI score0.0103EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/27 10:56 a.m.•20 views

EUVD-2026-49146

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS7.2AI score0.0103EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/27 10:56 a.m.•22 views

CVE-2026-43871

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS7.2AI score0.0103EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/27 10:56 a.m.•21 views

CVE-2026-43871

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS7.2AI score0.0103EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/07/27 10:56 a.m.•22 views

CVE-2026-43871

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS7.2AI score0.0103EPSS
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/07/27 10:53 a.m.•19 views

Security update for ignition

This update for ignition fixes the following issues CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invalid...

9.1CVSS5.9AI score0.00692EPSS
SaveExploits0References8
osv_suse
osv_suse
•added 2026/07/27 10:52 a.m.•10 views

SUSE-SU-2026:3266-1 Security update for ignition

This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invali...

9.6CVSS6.2AI score0.00692EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
•added 2026/07/27 10:52 a.m.•24 views

Security update for ignition

This update for ignition fixes the following issues CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invalid...

9.1CVSS5.9AI score0.00692EPSS
SaveExploits0References8
osv_suse
osv_suse
•added 2026/07/27 10:52 a.m.•12 views

SUSE-SU-2026:3265-1 Security update for ignition

This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invali...

9.6CVSS6.2AI score0.00692EPSS
SaveExploits0References5
osv_azl
osv_azl
•added 2026/07/27 8:16 a.m.•16 views

AZL-93959 CVE-2026-64536 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in isapintkip IE loop The loop in isapintkip iterates over IEs without verifying that enough bytes remain before dereferencing the IE header or its payload: - pIE-elementid and pIE-length are rea...

8.1CVSS6.2AI score0.00249EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/07/27 8:16 a.m.•20 views

UBUNTU-CVE-2026-64536

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in isapintkip IE loop The loop in isapintkip iterates over IEs without verifying that enough bytes remain before dereferencing the IE header or its payload: - pIE-elementid and pIE-length are rea...

8.1CVSS6.5AI score0.00249EPSS
SaveExploits0References30
RedhatCVE
RedhatCVE
•added 2026/07/27 8:06 a.m.•27 views

CVE-2026-64290

A flaw was found in the Linux kernel's iommufd component. When a copytouser operation fails within the iommufdfaultfopsread function, the system enters an infinite loop. This continuous retry consumes 100% of the CPU and holds a mutex, which can lead to a denial of service DoS for affected system...

5.5CVSS5.8AI score0.00159EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/27 6:36 a.m.•1 views

CVE-2026-64536 staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in isapintkip IE loop The loop in isapintkip iterates over IEs without verifying that enough bytes remain before dereferencing the IE header or its payload: - pIE-elementid and pIE-length are rea...

8.1CVSS6.2AI score0.00249EPSS
SaveExploits0References7
CVE
CVE
•added 2026/07/27 6:36 a.m.•62 views

CVE-2026-64536

CVE-2026-64536 concerns the Linux kernel staging rtl8723bs module, where an IE loop in is_ap_in_tkip() could perform an out-of-bounds read due to missing bounds checks. The current logic reads pIE->element_id and pIE->length without validating that i + sizeof(*pIE) data against offsets (12 ...

8.1CVSS6.2AI score0.00249EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/07/27 6:36 a.m.•21 views

CVE-2026-64536

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in isapintkip IE loop The loop in isapintkip iterates over IEs without verifying that enough bytes remain before dereferencing the IE header or its payload: - pIE-elementid and pIE-length are rea...

6.5AI score0.00249EPSS
SaveExploits0References8Affected Software1
osv_cve
osv_cve
•added 2026/07/27 6:36 a.m.•19 views

CVE-2026-64536 staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in isapintkip IE loop The loop in isapintkip iterates over IEs without verifying that enough bytes remain before dereferencing the IE header or its payload: - pIE-elementid and pIE-length are rea...

8.1CVSS6AI score
SaveExploits0References10
EUVD
EUVD
•added 2026/07/27 6:36 a.m.•20 views

EUVD-2026-49114

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in isapintkip IE loop The loop in isapintkip iterates over IEs without verifying that enough bytes remain before dereferencing the IE header or its payload: - pIE-elementid and pIE-length are rea...

6.2AI score0.00249EPSS
SaveExploits0References7
Rows per page
Query Builder