715674 matches found
EUVD-2026-54557
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the content negotiation header parser used by SvelteKit's request handling for headers such as Accept uses a regular expression vulnerable to quadratic backtracking, so a maliciously...
CVE-2026-20348 ClamAV XAR File Format Processing Memory Corruption Vulnerability
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
CVE-2026-20348
CVE-2026-20348 affects ClamAV’s XAR file format parser. The issue stems from improper boundary checks for XAR content during scanning, leading to memory corruption. An unauthenticated, remote attacker can submit a crafted XAR file to trigger the vulnerability, potentially causing the ClamAV scann...
EUVD-2026-54508
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
EUVD-2026-54507
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper handling of an endian conversion...
CVE-2026-20345 ClamAV GPT File Format Processing Memory Corruption Vulnerability
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper handling of an endian conversion...
CVE-2026-20345
ClamAV's GPT file format parser is affected by memory corruption due to improper endian conversion, causing an out-of-bounds write. An unauthenticated attacker can submit a crafted GPT file to a vulnerable ClamAV scanner, potentially terminating the scanning process and causing a DoS. CVSSv3.1 ba...
CVE-2026-20339 ClamAV PESpin File Format Processing Integer Overflow Vulnerability
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpi...
EUVD-2026-54506
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpi...
CVE-2026-20339
CVE-2026-20339 describes a DoS-ialtering vulnerability in the PESpin file format parser of ClamAV due to improper boundary checks during scanning, which may trigger an integer overflow. An unauthenticated, remote attacker could submit a crafted PESpin-containing file to cause the ClamAV scanning ...
CVE-2026-20347 ClamAV Mach-O File Format Processing Memory Corruption Vulnerability
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in Mach-...
EUVD-2026-54532
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in Mach-...
CVE-2026-20347
The CVE concerns ClamAV’s Mach-O file format parser. The vulnerability arises from improper boundary checks during Mach-O content scanning, causing memory corruption that can lead to an out-of-bounds buffer read. An unauthenticated, remote attacker could submit a crafted Mach-O file to a affected...
EUVD-2026-54531
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...
CVE-2026-20346 ClamAV PDF File Format Processing Memory Corruption Vulnerability
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...
CVE-2026-20346
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...
CVE-2026-20346
Summary: CVE-2026-20346 affects the PDF file format parser in ClamAV. The vulnerability arises from improper boundary checks during PDF content processing, leading to an out-of-bounds buffer read and memory corruption. Impact as described: An unauthenticated, remote attacker can submit a crafted ...
EUVD-2026-54530
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...
EUVD-2026-54529
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip files during scanning. An attacker could exploit this...
CVE-2026-20338 ClamAV ZIP File Format Processing Memory Corruption Vulnerability
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip files during scanning. An attacker could exploit this...