15097 matches found
SUSE CVE-2026-109351
Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by supplying a huge pack-header object count. Malicious remotes can serve a 12-byte pack header claiming 0xFFFFFFFF objects, forcing Tree::withcapacity to...
CVE-2026-54700 ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can...
CVE-2026-54700
The ConnectBot SSH Client Library (prior to version 0.3.1 ) contains a vulnerability where the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying if they fit within the containing packet. A malicious or compromised SSH server can send a small, m...
CVE-2026-90196
A flaw was found in the Linux kernel's Sound Open Firmware SOF component. This vulnerability occurs due to improper validation of topology mixer volume ranges. An attacker could potentially provide malformed volume range values, leading to an integer overflow during memory allocation. This could...
MessagePack-CSharp Denial of Service Vulnerability
Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network...
Memory Allocation with Excessive Size Value
Overview org.webjars.npm:js-beautify is a reformat and re-indent bookmarklets, ugly JavaScript, unpack scripts packed by Dean Edward’s popular packer, as well as partly deobfuscate scripts processed by the npm package "javascript-obfuscator". Affected versions of this package are vulnerable to...
Memory Allocation with Excessive Size Value
Overview js-beautify is a reformat and re-indent bookmarklets, ugly JavaScript, unpack scripts packed by Dean Edward’s popular packer, as well as partly deobfuscate scripts processed by the npm package "javascript-obfuscator". Affected versions of this package are vulnerable to Memory Allocation...
CVE-2026-109149
A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...
CVE-2026-92707
Impact MessagePack-CSharp is vulnerable to denial of service through excessive memory allocation when deserializing attacker-controlled data into "System.Object". When "PrimitiveObjectFormatter" encounters an array, it allocates an "object" using the declared array length before enforcing the...
CVE-2026-109149 beautifier js-beautify memory allocation
A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...
CVE-2026-109149 beautifier js-beautify memory allocation
A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...
CVE-2026-109149
A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...
CVE-2026-109149
The beautifier js-beautify library, in versions up to 1.15.1/2.0.3 , contains a vulnerability where an unknown function can be manipulated to cause uncontrolled memory allocation . This issue can be triggered via a remote attack , potentially leading to a denial of service or resource exhaustion....
BIT-ELASTICSEARCH-2026-103005 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of memory when connector resources with an...
CLEANSTART-2026-YM59079 Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...
Security vulnerability affects the grafana package. Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings...
CVE-2026-92707
Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network...
UBUNTU-CVE-2026-92707
Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network...
ROS-20261013-73-0460
The vulnerability of the apparmor/resource.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-85324: Memory Allocation with Excessive Size Value
Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-85324: Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...