239 matches found
CVE-2026-119052
A flaw was found in llama.cpp. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted request with an excessively large message length to the Remote Procedure Call RPC server. Handling this malformed input triggers an unhandled exception, crashing the...
CVE-2026-70388
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowin...
CVE-2026-70388
SOEM version 2.0.0 and earlier is vulnerable to memory corruption due to an integer underflow in message length validation. A malicious device on the network can send specially crafted messages that cause the software to perform arithmetic on length values without proper validation. This allows n...
EUVD-2026-109659
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowin...
CVE-2026-70388 Memory Corruption via Integer Underflow in Message Length Validation
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowin...
kernel: Fix of 39 CVEs
nfs: fix UAF in direct writes CVE-2024-26958 - NFSD: Fix the behavior of READ near OFFSETMAX CVE-2022-48827 - thermal: core: prevent potential string overflow CVE-2023-52868 - ath5k: fix OOB in ath5keepromreadpcalinfo5111 CVE-2021-47633 - RDMA/cma: Ensure rdmaaddrcancel happens before issuing...
CVE-2026-103223
A flaw was found in vertx-pg-client. A malicious, compromised, or intermediary database server can trigger a Denial of Service DoS condition by sending a message header containing an excessively large length value before authentication completes. Because the client does not properly validate the...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msglen to CECMAXMSGSIZE I expect that the hardware will have limited this value to 16, but just in case it isn’t the case, check for this corner case...
Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability (CVE-2026-10853)
Summary IBM MQ Appliance has addressed an improper validation vulnerability that could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths. Vulnerability Details...
CLSA-2026-1788815237 rsyslog: Fix of CVE-2026-19654
CVE-2026-19654: guard imptcp regex framing match at line start to prevent a negative message length after oversize-frame recovery...
CVE-2026-85201
In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. A workload granted Control Interface access can specify an excessive message length, causing an unbounded...
CLSA-2026-1788344259 Fix CVE(s): CVE-2026-19654
SECURITY UPDATE: Denial of service in the optional imptcp module - debian/patches/CVE-2026-19654.patch: guard the regex framing match at line start in plugins/imptcp/imptcp.c, so a match at offset zero after oversize-frame recovery can no longer submit a negative message length - CVE-2026-19654...
CLSA-2026-1788262732 Fix CVE(s): CVE-2026-19654
SECURITY UPDATE: denial of service in the optional imptcp module: a regex match at offset zero after oversize-frame recovery submits a negative message length and crashes rsyslogd - debian/patches/CVE-2026-19654.patch: denial of service in the optional imptcp module: a regex match at offset zero...
UBUNTU-CVE-2026-74460
In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...
CVE-2026-74460 can: ems_usb: validate CPC message lengths
In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...
CVE-2026-74460 can: ems_usb: validate CPC message lengths
In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...
PT-2026-72912
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ems usb read bulk callback function where CPC CAN Protocol Control messages packed in a USB receive buffer are not properly validated. The function fails to verify...
CVE-2026-73152
GHSA-4g8q-rgxf-fmgf: EchoLink proxy: integer truncation in message length...
