CVE-2026-88382

The hiredis library (commit 29ea279, post-v1.5.0) contains an uncontrolled memory allocation vulnerability within its RESP aggregate parser . This flaw allows for the allocation of resources without sufficient limits or throttling. While the vulnerability is documented across multiple security ad...

CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

ROS-20260924-73-0066

The vulnerability of the i40e component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-59991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from...

CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

Linux Distros Unpatched Vulnerability : CVE-2026-97440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the...

EUVD-2026-86315

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

CVE-2026-97440

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...

PT-2026-104909

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr send resume tx calls qrtr node lookup which takes a reference on the returned node. If the subsequent call to qrtr alloc ctrl packet fails due to memory allocati...

Security update for ant (important)

openSUSE security update: security update for ant ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21891-1 Rating: important References: bsc1188469 bsc1246873 bsc1280015 Cross-References: CVE-2021-36374 CVE-2025-7962 CVE-2026-78254 CVSS scores:...

CVE-2026-66080

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.11, 4.2.6, and 4.3.0, validatepartitions only checks that the requested partition count is at least 1, with no upper bound. A large count such as lists:seq0, 500000000 allocates roughly 8GB. Preconditions include The...

CVE-2026-66080

The messaging broker RabbitMQ is vulnerable to an unbounded memory allocation issue in the validate_partitions function. Prior to versions 4.1.11, 4.2.6, and 4.3.0 , the system fails to enforce an upper bound on the requested partition count, allowing a large count (e.g., 500,000,000) to allocate...

SUSE CVE-2026-93752

CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger excessive memory allocation during cssTex...

CVE-2026-75935

A flaw was found in Amazon ion-java. This uncontrolled memory allocation vulnerability in the binary Ion stream cursor allows remote attackers to cause a denial of service DoS by sending a specially crafted Ion binary document. The crafted document contains a declared-length field that triggers...

CVE-2026-83600

A flaw was found in Netdata. An authenticated child agent can send an oversized chart slot value, leading to an attempt to allocate a very large memory array. This allocation failure causes the parent Netdata agent to crash, resulting in a Denial of Service DoS by repeatedly disabling centralized...

CVE-2026-81886

A flaw was found in radare2. The Windows 64-bit crash-dump dmp64 parser in radare2 is vulnerable to uncontrolled memory allocation. A local user could exploit this by opening a specially crafted full-memory Windows crash dump, leading to the parser repeatedly allocating memory without proper...

CVE-2026-61723

A flaw was found in FluidSynth. The native DLS parser, when processing ptbl chunks, does not properly validate the size calculation, leading to an integer overflow. A remote attacker could craft a malicious DLS file that, when processed, causes the application to attempt to allocate an excessive...

MGASA-2026-0435 Updated cpio packages fix security vulnerabilities

Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...

Updated cpio packages fix security vulnerabilities

Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...