CVE-2026-110257 OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute

OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute that sizes an int array from numbootstrapmethods without validating attributelength. Attackers can supply a crafted class file of about 100 bytes that forces roughly 2 GB...

CVE-2026-110257

OW2 ASM 5.0 versions prior to 9.11 are vulnerable to an excessive memory allocation vulnerability within the ClassReader.readBootstrapMethodsAttribute() function. The root cause is the failure to validate attribute_length when sizing an int array from num_bootstrap_methods . An attacker can provi...

CVE-2026-98412 power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrsequnitnew If memory allocation fails in pwrsequnitsetupdeps, pwrsequnitput is called to release the partially initialized unit. However, we've never initialized unit-list and...

Formbook-Payload-Extraction-XOR-Decryption-Net-Assembly-Analysis

1. x32dbg – Encrypted Configuration Decryption & Memory Allocation The x32dbg memory dump reveals that Formbook decrypts its configuration data and allocates memory for it using NtAllocateVirtualMemory. Key Observations: NtAllocateVirtualMemory – Allocates memory for the decrypted payload. mov...

CVE-2026-110257: Memory Allocation with Excessive Size Value

OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute that sizes an int array from numbootstrapmethods without validating attributelength. Attackers can supply a crafted class file of about 100 bytes that forces roughly 2 GB...

CVE-2026-110258: Memory Allocation with Excessive Size Value

OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors that fails to enforce the single-RET-per-JSR rule. Attackers can supply a crafted invalid class file with multiple RET instructions for one JSR, triggering a roughly 2 GB allocation...

PT-2026-114026

OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal and computeAllFrames when using COMPUTE MAXS or COMPUTE FRAMES. Attackers can supply a crafted class file with thousands of overlapping exception handlers, causing excessive Edge...

PT-2026-114037

🚨 CVE-2026-110595 BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in read upload that reads entire CSV uploads before enforcing the 5 MB limit. Authenticated users with mass-import permission can send oversized CSV files concurrently to /api/contacts/import/...

PT-2026-114024

OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors that fails to enforce the single-RET-per-JSR rule. Attackers can supply a crafted invalid class file with multiple RET instructions for one JSR, triggering a roughly 2 GB allocation...

PT-2026-114023

OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute that sizes an int array from num bootstrap methods without validating attribute length. Attackers can supply a crafted class file of about 100 bytes that forces roughly 2 GB...

PT-2026-114028

OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class files. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in...

PT-2026-114391

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq unit new If memory allocation fails in pwrseq unit setup deps, pwrseq unit put is called to release the partially initialized unit. However, we've never initialized...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130158 advisory. Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic...

MessagePack Heap Buffer Overflow DoS

The vulnerability of the MessagePack serialization library is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Unity Linux 20.1070a Security Update: grafana-pcp (UTSA-2026-130111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130111 advisory. Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic...

cpio: GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archives

A flaw was found in GNU cpio. This vulnerability involves uncontrolled memory allocation when processing specially crafted cpio archives. A remote attacker could exploit this by providing a malicious archive, leading to a stack overflow and causing the cpio process to crash. This results in a...

CVE-2026-85324

A Denial of Service (DoS) vulnerability exists in Active Directory Federation Services (AD FS) due to memory allocation with excessive size value (CWE-789). An unauthorized attacker can exploit this flaw over a network to disrupt service availability. The CVSS 3.1 score is 7.5 (High) , indicating...

CVE-2026-33374

A flaw was found in Grafana. The Prometheus rule conversion API endpoints fail to enforce a limit on request body sizes. An authenticated user can exploit this vulnerability by submitting excessively large requests to trigger unbounded memory allocation, which crashes the server and results in a...

CVE-2026-54086 SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service

SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...

CVE-2026-54086 SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service

SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...