CLEANSTART-2024-DM47223 Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities

Security vulnerability affects the librewolf package. Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities...

AZL-111530 CVE-2026-116566 affecting package python-py 1.11.0-1

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566 socket.getaddrinfo() accepts embedded null bytes in host and port

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566

The socket.getaddrinfo() function is vulnerable to improper neutralization of null bytes (CWE-158). It accepts null bytes within the host and port parameters, which can lead to the silent truncation of these values. This behavior can impact the security of network connections. Remediation involve...

CVE-2026-116566 socket.getaddrinfo() accepts embedded null bytes in host and port

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566 socket.getaddrinfo() accepts embedded null bytes in host and port

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566: Python Software Foundation CPython: socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to…

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

PT-2026-132714

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The socket.getaddrinfo function accepts null bytes within the host and port parameters, which may lead to the values being silently truncated. Recommendations A...

mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin

A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information qcinfo plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffe...

BIT-MYSQL-CLIENT-2026-107816 MariaDB: `qc_info` plugin can do OOB reads if query contains \0

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could be confused by a query containing embedded null bytes. Reading informationschema.querycacheinfo after such a query was cached could acces...

BIT-MARIADB-MIN-2026-107816 MariaDB: `qc_info` plugin can do OOB reads if query contains \0

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could be confused by a query containing embedded null bytes. Reading informationschema.querycacheinfo after such a query was cached could acces...

BIT-MARIADB-2026-107816 MariaDB: `qc_info` plugin can do OOB reads if query contains \0

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could be confused by a query containing embedded null bytes. Reading informationschema.querycacheinfo after such a query was cached could acces...

PT-2026-115897

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...

PT-2026-115909

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...

PT-2026-115921

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...

Linux Distros Unpatched Vulnerability : CVE-2026-107816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could ...

mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin

A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information qcinfo plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffe...

CVE-2026-107816

A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information qcinfo plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffe...