CVE-2026-63501

The ag-psd JavaScript library for Photoshop Document files is vulnerable to uncontrolled memory allocation in the PSD layer decoding process. Prior to version 31.0.3 , the readPsd() function fails to correctly pass the totalMemoryLimit to decodeLayerImageData because it expects a differently name...

CVE-2026-63501 ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2026-115716

Allocation of Resources Without Limits or Throttling CWE-770 in APM Server can lead to denial of service via Oversized Serialized Data Payloads CAPEC-231. An attacker who can send OpenTelemetry OTLP data to APM Server over HTTP can cause APM Server to exhaust its memory and terminate. This stops...

CVE-2026-115716 Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in APM Server can lead to denial of service via Oversized Serialized Data Payloads CAPEC-231. An attacker who can send OpenTelemetry OTLP data to APM Server over HTTP can cause APM Server to exhaust its memory and terminate. This stops...

CVE-2026-115716

The APM Server is vulnerable to a Denial of Service (DoS) due to Allocation of Resources Without Limits or Throttling (CWE-770) . An attacker can send Oversized Serialized Data Payloads (CAPEC-231) via OpenTelemetry (OTLP) data over HTTP , causing the server to exhaust its memory and terminate. T...

EUVD-2026-116081

Allocation of Resources Without Limits or Throttling CWE-770 in APM Server can lead to denial of service via Oversized Serialized Data Payloads CAPEC-231. An attacker who can send OpenTelemetry OTLP data to APM Server over HTTP can cause APM Server to exhaust its memory and terminate. This stops...

APM Server 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-236)

Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in APM Server can lead to denial of service via Oversized Serialized Data Payloads CAPEC-231. An attacker who can send OpenTelemetry OTLP da...

Elasticsearch 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-235)

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of t...

CVE-2026-108147 Potential memory exhaustion in MultiPartParser via base64-encoded file upload

An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.19. django.http.multipartparser.MultiPartParser is subject to excessive memory consumption when processing multipart file uploads with base64 Content-Transfer-Encoding, which could be buffered entirely ...

CVE-2026-108147

The Django web framework is vulnerable to excessive memory consumption in the django.http.multipartparser.MultiPartParser component. This occurs when processing multipart file uploads that utilize base64 Content-Transfer-Encoding, as the data may be buffered entirely in memory before reaching upl...

EUVD-2026-115915

In Eclipse Vert.x versions 4.0.0, 4.5.35 or 5.0.0, 5.2.2, the FrameParser in vertx-stomp creates a RecordParser without setting maxRecordSize, so any peer that streams bytes continuously without a newline character causes the parser to accumulate data indefinitely. Both the STOMP server and the...

CVE-2026-121405

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an IRPMJDEVICECONTROL request with IOCTLUSBPRINTGET1284ID and a...

CVE-2026-121403

FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICEIOREQUEST with a truncated IRPMJCREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting...

CVE-2026-121399

FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdgreceivepacket that allows a malicious RD Gateway to force a 2 GiB client allocation before tunnel authentication. Attackers can send an eight-byte RDG header declaring packet length 0x7FFFFFFF to trigger pre-authentication...

CVE-2026-121388

FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATAFIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing...

CVE-2026-121412 FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets connected clients retain heap memory via intercepted DVC message reassembly. Attackers can declare a large DATAFIRST length and keep sending fragments without completing the message...

CVE-2026-121412

FreeRDP versions 3.0.0 before 3.32.2 is affected by a proxy memory exhaustion vulnerability (CWE-770) during DVC message reassembly . An attacker can declare a large DATA_FIRST length and transmit continuous fragments without completing the message, causing the proxy to retain heap memory proport...

EUVD-2026-115937

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an IRPMJDEVICECONTROL request with IOCTLUSBPRINTGET1284ID and a...

CVE-2026-121405

FreeRDP versions before 3.32.2 are vulnerable to a memory exhaustion issue within the serial RDPDR device control. The root cause is a failure to cap the OutputBufferLength in serial device-control IRP requests. A malicious server using serial redirection can trigger excessive memory allocation o...

CVE-2026-121405 FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an IRPMJDEVICECONTROL request with IOCTLUSBPRINTGET1284ID and a...