CLEANSTART-2024-BN94283 developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes

Security vulnerability affects the librewolf package. The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes...

CLEANSTART-2024-QT59975 developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes

Security vulnerability affects the firefox package. The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes...

CLSA-2026-1792417348 TuxCare security update for @storybook/addon-measure (1 CVE)

TuxCare rebuilt @storybook/addon-measure to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

PT-2026-132526

TuxCare rebuilt @storybook/addon-measure to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

Astra Linux – vulnerability in Firefox

The developer page on about:memory includes a Measure function designed to explore which object types the browser has allocated and their sizes. When this function was invoked, we erroneously called the sizeof function instead of using the API method that checks for invalid pointers. This...

vulnerabilities in Adobe Experience Manager Forms JEE

Adobe has identified 6 vulnerabilities in Adobe Experience Manager AEM Forms for Java Enterprise Edition JEE, including AEM 6.5 Forms and AEM 6.5 LTS Forms. These vulnerabilities concern various security issues, such as improper authorization, inadequate input validation, Server-Side Request...

Malicious code in configure-measure (npm)

The package configure-measure was found to contain malicious code. --- Credit: OpenSSF source...

Malware in @servicetitan/measure-sheet-data

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

openSUSE 16 Security Update : perl (openSUSE-SU-2026:21411-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21411-1 advisory. - CVE-2025-15649: IO:Uncompress:Unzip propagates uncaught exception when parsing zip header with malformed DOS date bsc1266361. - CVE-2026-8376:...

SUSE-SU-2026:22847-1 Security update for perl

This update for perl fixes the following issues: - CVE-2025-15649: IO:Uncompress:Unzip propagates uncaught exception when parsing zip header with malformed DOS date bsc1266361. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds...

SUSE CVE-2026-57432

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in Smeasurestruct leading to an out-of-bounds heap read in pack and unpack. Smeasurestruct adds each item's size times its repeat count to a running total with no overflow check, so...

UBUNTU-CVE-2026-61627

GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wraplinesmeasure...

PT-2026-64218

Name of the Vulnerable Software and Affected Versions libass affected versions not specified Description An out-of-bounds read and write occurs in the wrap lines measure function. This issue affects libass, a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha...

CVE-2026-61627

GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wraplinesmeasure...

UBUNTU-CVE-2026-57432

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in Smeasurestruct leading to an out-of-bounds heap read in pack and unpack. Smeasurestruct adds each item's size times its repeat count to a running total with no overflow check, so...

CVE-2026-57432

CVE-2026-57432 detail (supported by connected docs): Perl versions through 5.43.10 contain an integer overflow in the S_measure_struct function that sums item sizes (size × repeat) without overflow checks. A large repeat count in a pack or unpack template can wrap the signed SSize_t total negativ...

CVE-2026-57432 Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in Smeasurestruct leading to an out-of-bounds heap read in pack and unpack. Smeasurestruct adds each item's size times its repeat count to a running total with no overflow check, so...

CVE-2026-57432

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in Smeasurestruct leading to an out-of-bounds heap read in pack and unpack. Smeasurestruct adds each item's size times its repeat count to a running total with no overflow check, so...

CVE-2026-43476 iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30i2c: fix buffer size in sps30i2creadmeas sizeofnum evaluates to sizeofsizet 8 bytes on 64-bit instead of the intended be32 element size 4 bytes. Use sizeofmeas to correctly match the buffer element type...

Malicious code in sketch-measure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54126529b9da791496e58ec744f6b7fe4fe769258480802eb5a3dcbc017d0d8 The package sketch-measure was found to contain malicious code. Source: ossf-package-analysis...