PT-2026-82800

Name of the Vulnerable Software and Affected Versions jwcrypto affected versions not specified Description A flaw allows a remote attacker to cause a denial of service DoS by sending a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token forc...

ROS-20260827-73-0007

The vulnerability of the sndymfpcimemalloc function in the sound/pci/ymfpci/ymfpcimain.c module of the Linux kernel’s audio subsystem is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

CVE-2026-47859

CVE-2026-47859 affects Spring Integration 's RFC6587SyslogDeserializer , the component used by the syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames. The root cause is that the deserializer trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array o...

CVE-2026-47859 Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

CVE-2026-47859

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

CVE-2026-47859 Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

CVE-2026-79921

amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial ...

urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response,...

Denial Of Service (DoS)

Bouncy Castle is vulnerable to Denial Of Service DoS. The vulnerability is due to an unbounded HSS public-key level count during verification, which allows an attacker to trigger excessive memory allocation and potentially cause a denial-of-service condition...

CVE-2026-73108

RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payload length encoded in a four-byte frame header and reserves that amount before receiving the payload. A crafted header can request up...

CVE-2026-73108

RustDesk versions before 1.4.7 are vulnerable to a denial-of-service caused by uncontrolled speculative memory allocation in BytesCodec . Before authentication, the decoder trusts the payload length encoded in a four-byte frame header and reserves that full amount of memory before the payload arr...

kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032288 advisory. In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098872 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory allocation size for queueprioritymap Fix a critical memory...

Security Bulletin: Vulnerability in opentelemetry-java affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in opentelemetry-java has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

Security Bulletin: Vulnerability in Pillow affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Pillow has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabilit...

Uncontrolled Resource Consumption

Bouncy Castle is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to allocating memory based on an attacker-controlled opaque length before performing bounds validation, which allows an attacker to trigger excessive memory allocation and potentially cause a...

SUSE-SU-2026:23358-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713...

CVE-2026-74728

A flaw was found in the Linux kernel's XFS filesystem. When the system attempts to allocate memory for an XFS buffer and that allocation fails, the xfsbuffree function is called with a null buffer address. This leads to a null pointer dereference, causing the kernel to crash. This vulnerability c...

libgit2: libgit2: Denial of Service via Unbounded Memory Allocation

A flaw was found in libgit2. The gitdeltaapply function incorrectly trusts an attacker-controlled size value from a delta object header, which is used for memory allocation before proper validation of delta instructions. A remote attacker or local user can supply malicious pack data, for example,...