CVE-2026-123610

rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to ...

CVE-2026-123610

The rustls library (versions before 0.23.46 ) is vulnerable to a Denial of Service (DoS) attack due to an uncontrolled memory allocation flaw in its optional Brotli certificate decompression . While the library limits the decompressed output size, it fails to adequately restrict the history windo...

CVE-2026-123610 rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression

rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to ...

CVE-2026-123610 rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression

rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to ...

EUVD-2026-119369

rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to ...

PT-2026-139891

rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to ...

CVE-2026-123610: rustls: rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression,…

rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to ...

BlobRunner

BlobRunner BlobRunner is a simple tool to quickly debug shellcode extracted during malware analysis. BlobRunner allocates memory for the target file and jumps to the base or offset of the allocated memory. This allows an analyst to quickly debug into extracted artifacts with minimal overhead and...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in megabytes...

CVE-2026-122052

A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of the file laspy/lasreader.py of the component LAS File Handler. The manipulation leads to uncontrolled memory allocation. Remote exploitation of the attack is possible...

CVE-2026-121824

A vulnerability has been identified in armeria versions prior to 1.43.0, where processing malformed Thrift messages can cause excessive memory allocation, potentially resulting in denial of service...

CVE-2026-120454

A flaw was found in sleuthkit. An attacker can cause a Denial of Service DoS by providing a specially crafted HFS+ filesystem image with an excessively large uncompressed attribute size. When sleuthkit attempts to decompress the data, a memory allocation failure triggers a null pointer dereferenc...

CVE-2026-73473

A flaw was found in GStreamer gst-plugins-good avidemux. In the subindex parser, missing validation of the entry count can cause excessive memory allocation and denial of service. Because avidemux is auto-plugged by playbin, decodebin, and gst-discoverer, opening or previewing a crafted AVI is...

DEBIAN-CVE-2026-73473

A flaw was found in GStreamer gst-plugins-good avidemux. In the subindex parser, missing validation of the entry count can cause excessive memory allocation and denial of service. Because avidemux is auto-plugged by playbin, decodebin, and gst-discoverer, opening or previewing a crafted AVI is...

CVE-2026-115909

A flaw was found in zip. A remote attacker can cause a denial of service DoS by supplying a specially crafted ZIP archive. When extracting symbolic link entries, the library attempts to allocate memory based on attacker-controlled size metadata before validating the entry data. Requesting an...

CVE-2026-73473

A flaw exists in GStreamer gst-plugins-good (avidemux) where the subindex parser fails to validate the entry count. This oversight can lead to excessive memory allocation and a denial of service (DoS) . The vulnerability is triggered when opening or previewing a crafted AVI file, as avidemux is a...

EUVD-2026-117926

A flaw was found in GStreamer gst-plugins-good avidemux. In the subindex parser, missing validation of the entry count can cause excessive memory allocation and denial of service. Because avidemux is auto-plugged by playbin, decodebin, and gst-discoverer, opening or previewing a crafted AVI is...

CVE-2026-103582

A flaw was found in Apache NMS ActiveMQ. The OpenWire protocol parsing component does not properly validate incoming frame sizes or verify that decoded length fields fit within the received frame. A malicious or compromised broker, or an attacker capable of modifying unencrypted network traffic,...

Linux Distros Unpatched Vulnerability : CVE-2026-122052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of the file laspy/lasreader.py of the component LAS Fi...

CVE-2026-116787

A flaw was found in FreeSWITCH. An unauthenticated attacker with network access to the event socket interface can cause a Denial of Service DoS by sending a message with a specially crafted Content-Length header. Because the header is processed prior to authentication, supplying negative or...