Linux Distros Unpatched Vulnerability : CVE-2026-106450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader allocates two new 4 MiB block buffers wheneve...

DEBIAN-CVE-2026-106450

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-frame mode allows attacker-controlled streams containing many...

CVE-2026-106450 yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-frame mode allows attacker-controlled streams containing many...

CVE-2026-106450

Prior to version 1.11.4 , yawkat LZ4 Java is vulnerable to a resource exhaustion issue in the net.jpountz.lz4.LZ4FrameInputStream.readHeader() function. When processing a maximum-block-size frame header in the default concatenated-frame mode, the component allocates two new 4 MiB block buffers. A...

CVE-2026-106450: Allocation of Resources Without Limits or Throttling

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-frame mode allows attacker-controlled streams containing many...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-86776

KeePass versions 2.35 through 2.61.1 are affected by a memory exhaustion vulnerability in the ReadHeaderField function. The root cause is a failure to validate KDBX header field sizes before performing memory allocation. An attacker can craft a malicious KDBX file declaring excessive header field...

karchive:ktar_zst_fuzzer: Use-of-uninitialized-value in QIODevice::read

Detailed Report: https://oss-fuzz.com/testcase?key=6030872209063936 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: ktarzstfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QIODevice::read...

opencv:core_fuzzer: Heap-buffer-overflow in cv::PngDecoder::readHeader

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6019058901778432 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: corefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x50500000054...

SUSE CVE-2017-9404

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tifojpeg.c, which allows attackers to cause a denial of service via a crafted file...

skia:animated_image_decode: Heap-buffer-overflow in read_metadata

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6213194765172736 Project: skia Fuzzing Engine: afl Fuzz Target: animatedimagedecode Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x614000000668 Cra...

skia-ftz:android_codec: Crash in read_metadata

Detailed Report: https://oss-fuzz.com/testcase?key=5926106987626496 Project: skia-ftz Fuzzing Engine: honggfuzz Fuzz Target: androidcodec Job Type: honggfuzzasanskia-ftz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x616800000378 Crash State: readmetadata SkJpegCodec::ReadHeader...

simd:simd_load_fuzzer: Use-of-uninitialized-value in Simd::Base::ImagePxmLoader::ReadHeader

Detailed Report: https://oss-fuzz.com/testcase?key=5243673561399296 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzermsansimd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Simd::Base::ImagePxmLoader::ReadHeader...

simd:simd_load_fuzzer: Use-of-uninitialized-value in Simd::Base::ImagePxmLoader::ReadHeader

Detailed Report: https://oss-fuzz.com/testcase?key=5931486124572672 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzermsansimd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Simd::Base::ImagePxmLoader::ReadHeader...

simd:simd_load_fuzzer: Heap-buffer-overflow in Simd::Base::ImagePxmLoader::ReadHeader

Project: https://github.com/ermig1979/Simd.git Detailed Report: https://oss-fuzz.com/testcase?key=5073943454154752 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerasansimd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000...

OSV-2017-76 Use-of-uninitialized-value in Archive::ConvertFileHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4279 Crash type: Use-of-uninitialized-value Crash state: Archive::ConvertFileHeader Archive::ReadHeader15 Archive::ReadHeader...

OSV-2017-14 Use-of-uninitialized-value in Archive::ConvertFileHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4614 Crash type: Use-of-uninitialized-value Crash state: Archive::ConvertFileHeader Archive::ReadHeader15 Archive::ReadHeader...

PT-2021-27444

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the Archive::ConvertFileHeader function, which is called...

PT-2021-27418

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the ToPercent function, which is called by...