Lucene search
+L

5483 matches found

OSV
OSV
added 2026/03/15 10:32 a.m.12 views

CVE-2026-4174 Radare2 Mach-O File mach0.c walk_exports_trie resource consumption

A vulnerability has been found in Radare2 5.9.9. This issue affects the function walkexportstrie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit h...

4.8CVSS5.1AI score
SaveExploits0References9
Cvelist
Cvelist
added 2026/03/15 10:32 a.m.74 views

CVE-2026-4174 Radare2 Mach-O File mach0.c walk_exports_trie resource consumption

A vulnerability has been found in Radare2 5.9.9. This issue affects the function walkexportstrie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit h...

4.8CVSS0.00115EPSS
SaveExploits0References7
CVE
CVE
added 2026/03/15 10:32 a.m.33 views

CVE-2026-4174

Radare2 had a low-severity local DoS-like issue in the Mach-O File Parser: the function walk_exports_trie in libr/bin/format/mach0/mach0.c can cause resource consumption. Affected version: 5.9.9; fix is to upgrade to 6.1.2 (patch identified as 4371ae84c99c46b48cb21badbbef06b30757aba0). A PoC exis...

4.8CVSS5.2AI score0.00115EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/03/15 12:00 a.m.22 views

PT-2026-25548

A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk exports trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit...

4.8CVSS5.2AI score0.00115EPSS
SaveExploits0References10
OSV
OSV
added 2026/03/12 8:57 p.m.12 views

GO-2026-4675 Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing in github.com/anchore/quill

Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing in github.com/anchore/quill...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References5
NVD
NVD
added 2026/03/11 8:16 p.m.15 views

CVE-2026-31961

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in...

5.5CVSS0.001EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/11 7:32 p.m.7 views

CVE-2026-31961 Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/11 7:32 p.m.10 views

CVE-2026-31961

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/03/11 7:32 p.m.12 views

CVE-2026-31961 Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in...

5.5CVSS5.9AI score
SaveExploits0References3
CVE
CVE
added 2026/03/11 7:32 p.m.40 views

CVE-2026-31961

CVE-2026-31961 Quill : The Go-based Quill tool before v0.7.1 is vulnerable to unbounded memory allocation when parsing Mach-O binaries. The code signs/notarizes macOS binaries and reads LC_CODE_SIGNATURE fields (DataSize, DataOffset, Size, SuperBlob, BlobIndex, Length) without validating these va...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/11 7:32 p.m.50 views

CVE-2026-31961 Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in...

5.5CVSS0.001EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/11 12:38 a.m.22 views

EUVD-2026-11329

Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/11 12:38 a.m.13 views

GHSA-XJ69-M9QQ-8M94 Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing

Impact Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in environments such as CI/CD pipelines, shared signing services, or any...

5.5CVSS5.9AI score0.001EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/03/11 12:38 a.m.11 views

Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing

Impact Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in environments such as CI/CD pipelines, shared signing services, or any...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/09 9:03 p.m.27 views

Security Bulletin: Multiple vulnerabilities impact AIX/VIOS due to OpenSSL

Summary Vulnerabilities in OpenSSL could allow an attacker to potentially execute arbitrary code CVE-2025-15467 or cause a denial of service CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796. OpenSSL is used by AIX as part of AIX's secu...

9.8CVSS6.6AI score0.47621EPSS
SaveExploits8Affected Software2
Ubuntu
Ubuntu
added 2026/03/09 4:06 p.m.15 views

USN-8080-1: YARA vulnerabilities

Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially crafted rules or files. A remote attacker could possibly use these issues to cause YARA to crash, resulting in a denial of service. These issues only affected Ubuntu 16.04 LTS...

9.1CVSS7.2AI score0.02996EPSS
SaveExploits12
OSV
OSV
added 2026/03/09 4:06 p.m.11 views

USN-8080-1 yara vulnerabilities

Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially crafted rules or files. A remote attacker could possibly use these issues to cause YARA to crash, resulting in a denial of service. These issues only affected Ubuntu 16.04 LTS...

9.1CVSS6.4AI score0.02996EPSS
SaveExploits12References18
CBLMariner
CBLMariner
added 2026/03/09 2:32 p.m.9 views

CVE-2025-47911 affecting package cri-o for versions less than 1.22.3-20

CVE-2025-47911 affecting package cri-o for versions less than 1.22.3-20. A patched version of the package is available...

5.3CVSS5.8AI score0.00502EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/03/09 2:32 p.m.6 views

CVE-2025-11065 affecting package cri-o for versions less than 1.22.3-20

CVE-2025-11065 affecting package cri-o for versions less than 1.22.3-20. A patched version of the package is available...

5.3CVSS5.8AI score0.00357EPSS
SaveExploits0
OSV
OSV
added 2026/02/26 8:31 p.m.10 views

AZL-78659 CVE-2026-27141 affecting package cri-o 1.30.1-1

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic...

7.5CVSS7.2AI score0.00501EPSS
SaveExploits0References1
Rows per page
Query Builder