393815 matches found
PT-2026-108310
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description HTTP/2 servers are susceptible to excessive memory allocation when processing "Trailer" headers sent by a client. The server uses these header values to populate...
PT-2026-108316
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Parsing a multipart form can bypass memory limits, allowing an arbitrarily long line to be read into memory. This occurs when the remaining limit at the start of...
PT-2026-108321
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A memory amplification issue exists where a client can send a specially crafted packet specifying multiple ECH outer extension references, which is prohibited by...
Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System
Summary Due to use of Golang Go multiple vulnerabilities affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2026-39827 DESCRIPTION: An authenticated SSH client that repeatedly opened channels which were rejected by the server...
Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 1 of 2)
Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-59869 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From...
SUSE-SU-2026:4254-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsyn...
[SECURITY] [DSA 6549-1] xz-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6549-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 07, 2026 https://www.debian.org/security/faq -...
Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion
Summary The HTML, JATS, ODS OpenDocument spreadsheet and BoxNote backends accept table rowspan / colspan values without an upper bound. A few bytes of input, such as , make docling run loops proportional to the declared span and allocate a table grid of the declared size. The result is CPU and...
GHSA-CGC7-9QP3-86M3 Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion
Summary The HTML, JATS, ODS OpenDocument spreadsheet and BoxNote backends accept table rowspan / colspan values without an upper bound. A few bytes of input, such as , make docling run loops proportional to the declared span and allocate a table grid of the declared size. The result is CPU and...
EUVD-2026-93557
ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer...
GHSA-FFP7-56PQ-64MR ImageSharp: ICC LUT16 output channel count can write beyond Vector4
Summary When ICC conversion is enabled, a malformed embedded ICC LUT16 profile with more than four output channels can corrupt memory during ImageSharp color conversion. The ICC parser accepts up to 15 CLUT output channels, while the conversion implementation stores intermediate values in Vector4...
ImageSharp: ICC LUT16 output channel count can write beyond Vector4
Summary When ICC conversion is enabled, a malformed embedded ICC LUT16 profile with more than four output channels can corrupt memory during ImageSharp color conversion. The ICC parser accepts up to 15 CLUT output channels, while the conversion implementation stores intermediate values in Vector4...
EUVD-2026-93553
ImageSharp: ICC LUT16 output channel count can write beyond Vector4...
GHSA-J9GM-C75J-XC9Q ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer
Summary ImageSharp's TIFF CCITT Group 3 T4 encoder can write beyond its allocated compressed-data buffer when encoding narrow 1-bit images. The unchecked writes can corrupt process memory and terminate the process. This report concerns only the T4 CcittGroup3Fax encoder path. It replaces the prio...
ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer
Summary ImageSharp's TIFF CCITT Group 3 T4 encoder can write beyond its allocated compressed-data buffer when encoding narrow 1-bit images. The unchecked writes can corrupt process memory and terminate the process. This report concerns only the T4 CcittGroup3Fax encoder path. It replaces the prio...
ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions
Summary A malformed embedded ICC profile can make ImageSharp allocate memory from attacker-controlled CLUT channel and grid dimensions before verifying that the declared CLUT values are present. In published v1 through v3 packages, the public lazy ICC parser allocates approximately 115 MB from th...
EUVD-2026-93556
ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions...
GHSA-GWG2-R3HJ-4W44 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions
Summary A malformed embedded ICC profile can make ImageSharp allocate memory from attacker-controlled CLUT channel and grid dimensions before verifying that the declared CLUT values are present. In published v1 through v3 packages, the public lazy ICC parser allocates approximately 115 MB from th...
EUVD-2026-94554
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min and Max against the worksheet column limit. SetColWidth reaches flatCols, which expands xlsxCol.Min through xlsxCol.Max...
CVE-2026-107215
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...