PYSEC-2026-1056 Potential double free of buffer during string decoding

Impact What kind of vulnerability is it? Who is impacted? When an error occurs while reallocating the buffer for string decoding, the buffer gets freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. Patches Has the problem been patche...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to a memory reallocation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the dpll_device_unregister() function in the drivers/dpll/dpll_core.c module of the DPLL driver support library in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dplldeviceunregister function in the drivers/dpll/dpllcore.c module of the Linux DPLL driver framework is related to a error in re-allocating previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `rpc_clnt_remove_pipedir()` function in the `net/sunrpc/clnt.c` module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the rpcclntremovepipedir function in the net/sunrpc/clnt.c module of the Linux kernel’s RPC implementation is related to the reallocation of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-10225: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-119 in the OpenSSL-based session module in AxxonSoft Axxon One C-Werk 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering...

The vulnerability of the archive_read_format_rar_seek_data() function in the Libarchive library allows a hacker to execute arbitrary code and cause a denial-of-service attack.

The vulnerability of the archivereadformatrarseekdata function in the Libarchive library is related to a memory reallocation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code and cause service interruptions...

CVE-2022-49878 bpf, verifier: Fix memory leak in array reallocation for stack state

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error NULL is returned by krealloc, callers of reallocarray were setting their allocation pointers to NULL, but on error krealloc does not touch the...

The vulnerability of the irqchip/gic-v3-its components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the irqchip/gic-v3-its components in the Linux operating system’s kernel is related to a memory reallocation error in the itsvpeirqdomainalloc function. Exploiting this vulnerability can allow an attacker to cause a service failure...