276 matches found
ROS-20260128-73-0014
A vulnerability in the hcicmdsyncclear function of the Bluetooth protocol implementation of the Linux operating system kernel is related to memory usage after it has been freed as a result of a race condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260126-73-0067
A vulnerability in the Linux operating system kernel is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
OESA-2026-1234 python-urllib3 security update
HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more. Security Fixes: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious...
CVE-2026-22036
Undici (HTTP/1.1 client for Node.js) contains a vulnerability in its decompression chain handling. Before versions 7.18.0 and 6.23.0, the chain can have an unbounded number of links, and the default maxHeaderSize allows a malicious server to insert thousands of compression steps, causing high CPU...
ROS-20260113-7302
A vulnerability in the altera-msgdma component of the Linux operating system kernel is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2019-2263
Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064...
CVE-2025-68376
In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CSMODESYSFS, if the buffer size is changed and enabled again, currently sysfsbuf will point to the newly allocated memorybufnew and free the old...
CVE-2025-68376 coresight: ETR: Fix ETR buffer use-after-free issue
In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CSMODESYSFS, if the buffer size is changed and enabled again, currently sysfsbuf will point to the newly allocated memorybufnew and free the old...
jose4j is vulnerable to DoS via compressed JWE content
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service DoS condition by crafting a malicious JSON Web Encryption JWE token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during...
ROS-20251217-7321
A vulnerability in the Redis database management system DBMS is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20251216-7365
A vulnerability in the Ozone component of Google Chrome and Microsoft Edge browsers is related to memory usage after it has been freed. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity and availability of protected information...
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-47914 DESCRIPTION: SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the...
CVE-2025-66627
CVE-2025-66627 affects Wasmi (WebAssembly interpreter for constrained/embedded systems). The issue is a Use-After-Free in Wasmi’s linear memory implementation triggered under certain memory growth conditions, potentially causing memory corruption, information disclosure, or code execution. Affect...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unverified skb length that could lead to the use of uninitialized memory...
CVE-2025-66418 urllib3 allows an unbounded number of links in the decompression chain
urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...
pypdf 安全漏洞
pypdf is py-pdf open source a free open source pure python PDF library . It is able to split, merge, crop and convert pages of a PDF file. pypdf versions prior to 6.4.0 has a security vulnerability , the vulnerability stems from the LZWDecode filter parsing PDF content streams may lead to excessi...
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems, which allows attackers to escalate their privileges.
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS allows a hacker to trigger a service failure.
The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
