CVE-2026-120146

Missing authorization in PostgreSQL REASSIGN OWNED allows a role granted INHERIT but not SET to transfer objects to the granted role. It also allows reassignment of database ownership without the CREATEDB privilege. The equivalent ALTER ... OWNER commands block this. Versions before PostgreSQL...

EUVD-2026-124420

Missing authorization in PostgreSQL REASSIGN OWNED allows a role granted INHERIT but not SET to transfer objects to the granted role. It also allows reassignment of database ownership without the CREATEDB privilege. The equivalent ALTER ... OWNER commands block this. Versions before PostgreSQL...

PT-2026-145832

Missing authorization in PostgreSQL REASSIGN OWNED allows a role granted INHERIT but not SET to transfer objects to the granted role. It also allows reassignment of database ownership without the CREATEDB privilege. The equivalent ALTER ... OWNER commands block this. Versions before PostgreSQL...

Linux Distros Unpatched Vulnerability : CVE-2026-81038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Object Transfer Service server builds its Object Action Control Point OACP response indication in oacpindsend subsys/bluetooth/services/ots/otsoacp.c. Befor...

CVE-2026-81038

The Object Transfer Service server builds its Object Action Control Point OACP response indication in oacpindsend subsys/bluetooth/services/ots/otsoacp.c. Before this fix the four-byte Checksum Value field was appended whenever the requested op code was BTGATTOTSOACPPROCCHECKSUMCALC, regardless o...

CVE-2026-81038

The Object Transfer Service server builds its Object Action Control Point OACP response indication in oacpindsend subsys/bluetooth/services/ots/otsoacp.c. Before this fix the four-byte Checksum Value field was appended whenever the requested op code was BTGATTOTSOACPPROCCHECKSUMCALC, regardless o...

UBUNTU-CVE-2026-81038

The Object Transfer Service server builds its Object Action Control Point OACP response indication in oacpindsend subsys/bluetooth/services/ots/otsoacp.c. Before this fix the four-byte Checksum Value field was appended whenever the requested op code was BTGATTOTSOACPPROCCHECKSUMCALC, regardless o...

EUVD-2026-109972

The Object Transfer Service server builds its Object Action Control Point OACP response indication in oacpindsend subsys/bluetooth/services/ots/otsoacp.c. Before this fix the four-byte Checksum Value field was appended whenever the requested op code was BTGATTOTSOACPPROCCHECKSUMCALC, regardless o...

PT-2026-123417

The Object Transfer Service server builds its Object Action Control Point OACP response indication in oacp ind send subsys/bluetooth/services/ots/ots oacp.c. Before this fix the four-byte Checksum Value field was appended whenever the requested op code was BT GATT OTS OACP PROC CHECKSUM CALC,...

Zephyr Project Zephyr improper exception handling vulnerability

A security vulnerability exists in Zephyr Project versions 3.3.0 through 4.4.2. It arises when the Object Transfer Service server, in oacpindsend, calls netbufsimplepullle32 on an uninitialized four-byte stack buffer via a failed path. Since OACP features require no pairing, encryption, or...

CVE-2024-8798 Bluetooth: classic: avdtp: missing buffer length check

No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...

PT-2024-39262

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue is related to improper validation of the length of user input in the olcp ind handler function in zephyr/subsys/bluetooth/services/ots/ots client.c. This lack of validation can lea...

UBUNTU-CVE-2024-6444

No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...

CVE-2024-6444 Bluetooth: ots: missing buffer length check

No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...

PT-2024-37631 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue is related to a lack of proper validation of the length of user input in the olcp ind handler function in zephyr/subsys/bluetooth/services/ots/ots client.c. This can lead to a buff...

Mobile Application MSM Android Device Restart

The vulnerability of the MSM mobile application for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a device reboot after a kernel failure. This occurs because when the object associated with the codec is...

Firefox Code Execution

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the Web Workers technology. Exploiting this vulnerability allows malicious actors to execute arbitrary code by terminating the worker process, thereby enabling them to transfer objects between threads...