MemTools

MemTools Windows, Linux DMA, Dump, Direct, inject memory tool DirectMemoryTools reads local memory DmaMemoryTools reads DMA memory, only supports DMA reading of Windows memory DumpMemoryTools reads dumped memory InjectMemoryTools reads memory through injection MemoryToolsBase is the base class fo...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a memory leak in Netty (CVE-2026-73508)

Summary IBM Watson Speech Services Cartridge is vulnerable to a memory leak in Netty, due to a failure to release memory when receiving a malformed domain name, allowing unauthenticated remote DNS packets to leak direct memory incrementally until denial of service. Netty is used in our Speech...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in Netty (CVE-2026-56816)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in Netty, due to a flaw in Netty's Http3FrameCodec that allows it to buffer incoming data for HTTP/3 reserved frame types up to the wire-specified payload length without limits. Netty is used in our...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to memory allocation and data amplification issues in Amazon ion-java (CVE-2026-75935, CVE-2026-75936, CVE-2026-85786)

Summary IBM Watson Speech Services Cartridge is vulnerable to memory allocation and data amplification issues in Amazon ion-java which could cause a denial of service condition. Amazon ion-java is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to memory allocation and validation issues in Bouncy Castle for Java (CVE-2026-59638, CVE-2026-59646)

Summary IBM Watson Speech Services Cartridge is vulnerable to memory allocation and validation issues in Bouncy Castle for Java, due to flaws with the handshake reassembler and hostname verifier. Bouncy Castle is used in our Speech microservices. These vulnerabilities have been addressed. Please...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java. Bouncy Castle is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-12185...

CVE-2026-98725

A flaw was found in the Linux kernel's NVMe over Fabrics NVMe-oF target authentication component. A remote attacker connecting to the NVMe target service can exploit this vulnerability by sending a crafted authentication request, causing a Denial of Service DoS through a system crash or potential...

CVE-2026-96235

A flaw was found in .NET. Due to an out-of-bounds write vulnerability, where data is written past the boundary of an allocated memory buffer, memory corruption can occur. A remote, unauthenticated attacker could exploit this issue over the network to achieve arbitrary code execution on the target...

CVE-2026-95721

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service...

CVE-2026-79955

An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected...

CVE-2026-79893

Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service...

CVE-2026-79892

A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-79879

Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-79865

A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-115391

Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length writes on the host without limit. Malicious guests can offer large buffers to WASIp3 file or HTTP write streams, causi...

CVE-2026-115388

wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:io/streams check-write allowance for WASIp2 outgoing HTTP bodies, so oversized writes succeed instead of trapping. A malicious guest can pass large buffers to write on...

DEBIAN-CVE-2026-115386

Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability in the WASIp1 fdreaddir implementation that copies uninitialized struct padding into guest memory. Guests with a preopened directory can list entries to receive three bytes of...

CVE-2026-114644

The MongoDB C Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handling of one BSON value type. An application that deserializes untrusted content with the library retains data derived from that content for the lifetime of the process, with no...

AZL-111044 CVE-2026-114613 affecting package python-msgpack 1.0.5-3

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

DEBIAN-CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...