CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

PT-2026-104909

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr send resume tx calls qrtr node lookup which takes a reference on the returned node. If the subsequent call to qrtr alloc ctrl packet fails due to memory allocati...

CVE-2026-97418: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup sndes18xxmixer creates controls with sndctlnew1 and then stores bookkeeping pointers or sets privatefree before calling sndctladd. sndctlnew1 can return NULL on...

CVE-2026-97440

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...

CVE-2026-88382

The hiredis library (commit 29ea279, post-v1.5.0) contains an uncontrolled memory allocation vulnerability within its RESP aggregate parser . This flaw allows for the allocation of resources without sufficient limits or throttling. While the vulnerability is documented across multiple security ad...

CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

CVE-2026-88382: Allocation of Resources Without Limits or Throttling

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

EUVD-2026-86315

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

Linux Distros Unpatched Vulnerability : CVE-2026-97440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the...

Linux Distros Unpatched Vulnerability : CVE-2026-59991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from...

Security update for ant (important)

openSUSE security update: security update for ant ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21891-1 Rating: important References: bsc1188469 bsc1246873 bsc1280015 Cross-References: CVE-2021-36374 CVE-2025-7962 CVE-2026-78254 CVSS scores:...

CVE-2026-66080

The messaging broker RabbitMQ is vulnerable to an unbounded memory allocation issue in the validate_partitions function. Prior to versions 4.1.11, 4.2.6, and 4.3.0 , the system fails to enforce an upper bound on the requested partition count, allowing a large count (e.g., 500,000,000) to allocate...

SUSE CVE-2026-93752

CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger excessive memory allocation during cssTex...

CVE-2026-75935

A flaw was found in Amazon ion-java. This uncontrolled memory allocation vulnerability in the binary Ion stream cursor allows remote attackers to cause a denial of service DoS by sending a specially crafted Ion binary document. The crafted document contains a declared-length field that triggers...

CVE-2026-83600

A flaw was found in Netdata. An authenticated child agent can send an oversized chart slot value, leading to an attempt to allocate a very large memory array. This allocation failure causes the parent Netdata agent to crash, resulting in a Denial of Service DoS by repeatedly disabling centralized...

CVE-2026-81886

A flaw was found in radare2. The Windows 64-bit crash-dump dmp64 parser in radare2 is vulnerable to uncontrolled memory allocation. A local user could exploit this by opening a specially crafted full-memory Windows crash dump, leading to the parser repeatedly allocating memory without proper...

CVE-2026-61723

A flaw was found in FluidSynth. The native DLS parser, when processing ptbl chunks, does not properly validate the size calculation, leading to an integer overflow. A remote attacker could craft a malicious DLS file that, when processed, causes the application to attempt to allocate an excessive...

MGASA-2026-0435 Updated cpio packages fix security vulnerabilities

Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...

Updated cpio packages fix security vulnerabilities

Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...

PT-2026-97563

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.3.0 Description An issue exists in the validate partitions function where it only verifies that the requested partition count is at least 1, withou...