CVE-2026-80915

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability involves incorrect memory allocation paths for Display Page Tables DPTs, which are used by the graphics processing unit. Under certain conditions, this could lead to the exhaustion of a specific memory region,...

CVE-2026-90412

A flaw was found in the nvmet component of the Linux kernel. When processing an RMI log page, if memory allocation for the log buffer fails, the system incorrectly reports a successful operation to the host. This can lead to the host believing data was transferred when it was not, potentially...

PT-2026-119528

Name of the Vulnerable Software and Affected Versions Moov signedxml versions prior to 1.4.1 Description An issue exists in the ExclusiveCanonicalization function within exclusivecanonicalization.go where the accumulated namespace map is copied at every nested element before reference digest or...

ALSA-2026:85930 Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python3.12-urllib3 security update

1.26.19-3.2 - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282261 1.26.19-3.1 - CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override HTTPS proxy TLS configuration...

python-urllib3 security update

1.26.19-4.2 - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282258 1.26.19-4.1 - CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override HTTPS proxy TLS configuration...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via missing decompression bomb checks in the seek methods of DcxImagePlugin, MicImagePlugin, and MpoImagePlugin. When a multi-frame image file DCX, MIC, or MPO format is opened and seeked to a...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the MSP image decoder in src/PIL/MspImagePlugin.py, where a malicious MSP file with run-length encoded rows can cause the decoder to expand more data than the image widt...

grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API

A flaw was found in Grafana. The Prometheus rule conversion API endpoints fail to enforce a limit on request body sizes. An authenticated user can exploit this vulnerability by submitting excessively large requests to trigger unbounded memory allocation, which crashes the server and results in a...

CVE-2026-92707

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

CVE-2026-110258

A flaw was found in OW2 ASM. An attacker could cause a Denial of Service DoS by providing a specially crafted, invalid Java class file. Due to improper validation of subroutine instructions, processing the file triggers excessive memory allocation, causing the Java Virtual Machine JVM to crash...

CVE-2026-110257

A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by providing a specially crafted Java class file. Due to missing attribute length validation during class parsing, processing the file triggers excessive memory allocation, exhausting system resources and crashing the...

CVE-2026-112283

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

CVE-2026-112283

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

CVE-2026-112283

VideoLAN libbluray versions through 1.5.1 are vulnerable to an uncontrolled memory allocation flaw within the _parse_extent_start_points() function in clpi_parse.c. The root cause is a lack of bounds checking on the num_point field. An attacker can provide a crafted .clpi file on a disc, image, o...

CVE-2026-112283 libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

EUVD-2026-104290

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

EUVD-2026-104303

SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in handlestagingrsp that lets unauthenticated network-adjacent attackers exhaust Prefill memory. Attackers can obtain the rank address from the /route endpoint and send STAGINGR...

CVE-2026-112214

A vulnerability exists in the GStreamer ASF demuxer within the gst-plugins-ugly component. The flaw occurs when parsing a Simple Index object , where an attacker-controlled entry count is used to determine the size of a heap allocation without being restricted to the actual payload size. Processi...