BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS SUR ANDROID NULL PTR DEREF, OOM JUSTE POUR LE LOL...

EUVD-2026-56926

ffuf denial of service OOM via HTTP response decompression bomb...

CVE-2026-84382 HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iterbytes or aiterbytes yields bounded pieces to the application. A 64 KiB compressed chunk can expa...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Aperçu Les versions = 2.1.1 de rardecode ne parviennent pas à restreindre la taille du dictionnaire lors de la lecture de grandes tailles de dictionnaire RAR, ce qui permet à un attaquant de fournir un fichier RAR spécialement conçu et de provoquer un déni de service via un cra...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit Eh bien, c'est juste une vieille vulnérabilité dont le numéro CVE est CVE-2008-4654. Cette vulnérabilité est causée par un manque de mémoire à la ligne 1650 de modules/demux/ty.c. root@kitploit: streamReadpdemux-s, mstbuf, 8 + imapsize; Quand j'ai téléchargé l'EXP depuis...

EUVD-2026-56600

Browserslist: Unbounded memory growth no cache eviction via distinct query results, leading to eventual OOM...

CVE-2019-12401

CVE-2019-12401 : Bombe XML dans Apache Solr Les versions de Solr antérieures à 5.0.0 sont vulnérables à une attaque par consommation de ressources XML également connue sous le nom de Lol Bomb via son gestionnaire de mise à jour. En exploitant les éléments de type DOCTYPE et ENTITY du XML,...

CVE-2026-61712

A flaw was found in BuildKit. A remote attacker could provide a malicious base image or build with oversized /etc/passwd and /etc/group files. When BuildKit attempts to resolve usernames or group identifiers from these files, it reads them without an upper bound, leading to excessive memory...

AZL-98412 CVE-2026-82254 affecting package rust 1.75.0-30

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...

DEBIAN-CVE-2026-82254

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...

ALPINE-CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

CVE-2026-82254

gitoxide before 0.69.0 is vulnerable to denial of service via its gix-pack component. The root cause is unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers . An attacker can send crafted pack data during clone or fetch operations to trigger ...

CVE-2026-82254 gitoxide before 0.69.0 Denial of Service via gix-pack

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...

EUVD-2026-67674

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

CVE-2026-42391

Open-Xchange Dovecot is vulnerable to a denial-of-service attack in its imap-login process. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before authentication, causing disproportionate memory and CPU consumption . The resulting out-of-memory termi...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

CVE-2026-81720

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81693

opensslencrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions...

CVE-2026-81692

opensslencrypt pip: openssl-encrypt versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO totalsamples field of FLAC files before using it to size an allocation np.random.randintsize=totalsamples, channels. A 50-byte crafted FLAC file declaring 100 million samples causes a...

EUVD-2026-67070

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...