CVE-2026-109395 Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM...

CVE-2026-109395

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM...

EUVD-2026-104679

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM...

CVE-2026-109395

The Ning compress-lzf library, in versions before 1.2.0 , is vulnerable to an out-of-bounds memory access within the sun.misc.Unsafe based UnsafeChunkDecoder . The root cause is a failure to properly validate back-references and literal runs during decompression. An attacker can provide a crafted...

CVE-2026-109395 Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM...

CVE-2026-109395 Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM...

PT-2026-117934

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM...

Rocky Linux 9.6 [TuxCare] Security Update: libpcap / libpcap-devel (ALMALINUX9.6:CLSA-2026:1792511364)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792511364 advisory. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must n...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : libXtst vulnerabilities (USN-8939-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8939-1 advisory. It was discovered that libXtst did not properly handle certain RECORD replies from th...

Linux Distros Unpatched Vulnerability : CVE-2026-98640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: amdsfh: Validate PCI BAR size before mapping The amdsfh driver maps PCI BAR 2 using pcimiomapregions and subsequently accesses MMIO registers at offsets up...

Linux Distros Unpatched Vulnerability : CVE-2026-112397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM...

Linux Distros Unpatched Vulnerability : CVE-2026-98806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-pf: Fix aura BPID assignment when CONFIGDCB is enabled Previously, BPID assignment under CONFIGDCB assumed queuetopfcmap was always initialized. For S...

AlmaLinux 9.6 [TuxCare] Security Update: libpcap / libpcap-devel (ALMALINUX9.6:CLSA-2026:1792511364)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792511364 advisory. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not...

Oracle Linux 9 : hostapd (ELSA-2026-85277)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85277 advisory. 2.11-3 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194042 Tenable has extracted the preceding description block directly fro...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46209)

"In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drmgemfbinitwithfuncs drmgemfbinitwithfuncs computes sub-sampled plane dimensions using plain integer division: unsigned int width = modecmd-width / i ? info-hsub : 1...

Oracle Linux 10 : hostapd (ELSA-2026-85276)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85276 advisory. 2.11-3 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194049 Tenable has extracted the preceding description block directly fr...

CVE-2026-112397

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted image with a width of zero to an application performing morphology operations. Because Pillow fails to validate zero-width image geometry during these operations, it attempts an...

CVE-2026-98518

A flaw was found in the Linux kernel's Nouveau graphics driver. This vulnerability allows a local user to cause a denial of service DoS or system instability through an out-of-bounds memory access in video random-access memory VRAM. The issue occurs because the driver fails to allocate an...

CVE-2026-98452

A flaw was found in the Linux kernel's Server Message Block SMB client. When opening cached directories, the client fails to validate server responses to compound commands before reading their contents and handling file identifiers. A malicious or compromised SMB server could exploit this flaw by...

UBUNTU-CVE-2026-98806

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix aura BPID assignment when CONFIGDCB is enabled Previously, BPID assignment under CONFIGDCB assumed queuetopfcmap was always initialized. For SDP VFs this leads to invalid memory access as it was not initialized...