Lucene search
+L

16024 matches found

Github Security Blog
Github Security Blog
•added 2026/02/24 8:44 p.m.•39 views

Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future

The affected versions of Wasmtime can panic if the host embedder drops the future returned by wasmtime::component::TypedFunc::callasync before it resolves. Details Starting with Wasmtime 39.0.0, the component-model-async feature became the default, which brought with it a new implementation of...

7.5CVSS5.6AI score0.00412EPSS
SaveExploits0References9Affected Software1
osv_ghsa
osv_ghsa
•added 2026/02/24 8:44 p.m.•33 views

GHSA-XJHV-V822-PF94 Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future

The affected versions of Wasmtime can panic if the host embedder drops the future returned by wasmtime::component::TypedFunc::callasync before it resolves. Details Starting with Wasmtime 39.0.0, the component-model-async feature became the default, which brought with it a new implementation of...

6.9CVSS5.6AI score0.00412EPSS
SaveExploits0References9
osv_rustsec
osv_rustsec
•added 2026/02/24 12:00 p.m.•21 views

RUSTSEC-2026-0022 Panic when dropping a `[Typed]Func::call_async` future

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xjhv-v822-pf94 For more information see the GitHub-hosted security advisory...

6.9CVSS5.8AI score0.00412EPSS
SaveExploits0References3
osv_rustsec
osv_rustsec
•added 2026/02/24 12:00 p.m.•29 views

RUSTSEC-2026-0021 Panic adding excessive fields to a `wasi:http/types.fields` instance

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-243v-98vx-264h For more information see the GitHub-hosted security advisory...

6.9CVSS5.9AI score0.00519EPSS
SaveExploits0References3
RustSec
RustSec
•added 2026/02/24 12:00 p.m.•32 views

Panic when dropping a `[Typed]Func::call_async` future

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xjhv-v822-pf94 For more information see the GitHub-hosted security advisory...

7.5CVSS5.8AI score0.00412EPSS
SaveExploits0Affected Software1
RustSec
RustSec
•added 2026/02/24 12:00 p.m.•41 views

Panic adding excessive fields to a `wasi:http/types.fields` instance

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-243v-98vx-264h For more information see the GitHub-hosted security advisory...

7.5CVSS5.9AI score0.00519EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/02/24 1:16 a.m.•27 views

CVE-2026-25501

free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, SMF panics due to nil pointer dereference and the SMF process terminates. This is triggered by a malformed PFCP...

8.7CVSS0.0036EPSS
SaveExploits1References2
Mend
Mend
•added 2026/02/24 12:15 a.m.•9 views

CVE-2026-26025

free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, SMF panics and terminates when processing a malformed PFCP SessionReportRequest on the PFCP UDP/8805 interface. No known upstrea...

8.7CVSS5.6AI score0.00351EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•12 views

CVE-2026-27572: Allocation of Resources Without Limits or Throttling

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of the wasi:http/types.fields resource is susceptible to panics when too many fields are added to the set of headers. Wasmtime's implementation in the wasmtime-wasi-http...

7.5CVSS5.8AI score0.00519EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•5 views

CVE-2026-27195: Improper Handling of Exceptional Conditions

Wasmtime is a runtime for WebAssembly. Starting with Wasmtime 39.0.0, the component-model-async feature became the default, which brought with it a new implementation of TypedFunc::callasync which made it capable of calling async-typed guest export functions. However, that implementation had a bu...

7.5CVSS5.6AI score0.00412EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/02/24 12:00 a.m.•22 views

FreeBSD Security Advisory - FreeBSD-SA-26:05.route

FreeBSD Security Advisory - The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not...

7.3AI score0.00608EPSS
SaveExploits2
osv_go
osv_go
•added 2026/02/23 6:23 p.m.•24 views

GO-2026-4504 emp3r0r Affected by Concurrent Map Access DoS (panic/crash) in github.com/jm33-m0/emp3r0r/core

emp3r0r Affected by Concurrent Map Access DoS panic/crash in github.com/jm33-m0/emp3r0r/core...

7.5CVSS8.2AI score0.00332EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/02/23 12:00 a.m.•27 views

PT-2026-34426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The module loader fails to verify the bounds of the ELF section index within the simplify symbols function. A symbol containing an out-of-bounds st shndx value, such as those defined as...

5.5CVSS6AI score0.00129EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/02/19 7:21 p.m.•24 views

CVE-2026-26201 emp3r0r Affected by Concurrent Map Access DoS (panic/crash)

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger fatal error: concurrent map read and map write, causing C2 process cra...

7CVSS8.1AI score0.00332EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2026/02/19 12:26 a.m.•19 views

SUSE CVE-2026-23211

In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swapspace attr aviod kernel panic commit 8b47299a411a "mm, swap: mark swap address space ro and add context debug check" made the swap address space read-only. It may lead to kernel panic if archpreparetoswap...

5.5CVSS5.8AI score0.00116EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/02/19 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-23211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swapspace attr aviod kernel panic commit 8b47299a411a mm, swap: mark swap...

5.5CVSS6AI score0.00116EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/18 3:18 p.m.•29 views

CVE-2026-23211

In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swapspace attr aviod kernel panic commit 8b47299a411a "mm, swap: mark swap address space ro and add context debug check" made the swap address space read-only. It may lead to kernel panic if archpreparetoswap...

5.5CVSS0.00116EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/02/18 3:18 p.m.•26 views

UBUNTU-CVE-2026-23211

In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swapspace attr aviod kernel panic commit 8b47299a411a "mm, swap: mark swap address space ro and add context debug check" made the swap address space read-only. It may lead to kernel panic if archpreparetoswap...

5.5CVSS6AI score0.00116EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/02/18 3:18 p.m.•13 views

CVE-2026-23211

In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swapspace attr aviod kernel panic commit 8b47299a411a "mm, swap: mark swap address space ro and add context debug check" made the swap address space read-only. It may lead to kernel panic if archpreparetoswap...

5.5CVSS5.8AI score0.00116EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/02/18 2:16 p.m.•50 views

CVE-2026-23211 mm, swap: restore swap_space attr aviod kernel panic

In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swapspace attr aviod kernel panic commit 8b47299a411a "mm, swap: mark swap address space ro and add context debug check" made the swap address space read-only. It may lead to kernel panic if archpreparetoswap...

0.00116EPSS
SaveExploits0References2
Rows per page
Query Builder