1607 matches found
EUVD-2026-74620
An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service...
kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. A remote Bluetooth Low Energy BLE device can exploit this by sending a specially crafted L2CAP ECRED reconfiguration response. This can lead to the corruption of the channel list,...
The vulnerability of the smc_v2_determine_accepted_chid() function in the net/smc/af_smc.c module of the SMC protocol family in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the smcv2determineacceptedchid function in the net/smc/afsmc.c module of the SMC protocol family in the Linux operating system’s kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
GHSA-2X7J-588G-CCC2 Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list
Summary Nodemailer's address parser lib/addressparser/index.js parses a list of comma‑separated addresses in quadratic time — On² in the number of addresses. A single crafted address string e.g. a To, Cc, Bcc, From, or Reply‑To value, or any value passed to the exported addressparser therefore...
CVE-2026-45527
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28666
In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55256
CVE-2026-55256 is a persistent denial of service vulnerability in the parsePartHeaders function across multiple files in Android , caused by improper input validation . A remote attacker with low privileges can trigger a denial of service without user interaction. The CVSS v3.1 score is 6.5 (Medi...
EUVD-2026-74016
In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45527
CVE-2026-45527 is an integer overflow (CWE-190) in the convertCleanApertureToRect function of HeifCleanAperture.cpp within the Android Media Framework component, affecting Android 14, 15, and 16 . The flaw allows a remote denial of service with low privileges required and no user interaction need...
EUVD-2026-74002
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28666
CVE-2026-28666 affects Android (identified via ASB-A-501447778 and the 2026-09-01 Android Security Bulletin). The vulnerability resides in multiple functions of LocalImageResolver.java , where a DNG image rendering check bypass enables a Remote Persistent Denial of Service that can escalate to re...
kernel: flow_dissector: do not dissect PPPoE PFC frames
A flaw was found in the Linux kernel's flow dissector. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted Point-to-Point Protocol over Ethernet PPPoE Protocol Field Compression PFC frame to an affected system. The incorrect processing of...
EUVD-2026-72638
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...
CVE-2026-86511 java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...
CVE-2026-20503
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
EUVD-2026-72196
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
ROS-20260907-73-0526
The vulnerability in Java-17-openJDK is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260907-73-0524
The vulnerability in Java 1.8.0-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260907-73-0501
The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...