CVE-2026-27879

A flaw was found in Grafana. A remote attacker with low privileges can exploit this vulnerability by sending a specially crafted resample query. This can trigger out-of-memory crashes, leading to a Denial of Service DoS for the affected system. Mitigation Mitigation for this issue is either not...

EUVD-2026-16636

A resample query can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

UBUNTU-CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27879 Query resampling can cause unbounded memory allocations

A resample query can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the lack of the upsample size in mathexp.Resample query. An attacker can cause the system to crash or become unresponsive by sending specially crafted queries that trigger...

CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

PT-2026-28371

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 11.6.14+security01-1 Description A resample query can be used to trigger out-of-memory crashes. Recommendations Update to version 11.6.14+security01-1...

Grafana -- Query resampling can cause unbounded memory allocations

https://grafana.com/security/security-advisories/cve-2026-27879 reports: A resample query can be used to trigger out-of-memory crashes in Grafana...

blocksnet (>=0.0.1, <=0.0.9), echofish-aws-raw-to-zarr-lambda (>=1.0.0.dev20230906215656, <=1.1.0.dev20230930183050) +8 more potentially affected by CVE-2025-69662 via geopandas (0.13.0)

geopandas PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopandas and may be impacted: - blocksnet =0.0.1, =1.0.0.dev20230906215656, =1.0.0.dev20230724172102, =0.2.1, =0.1.0, =0.0.1, =1.1.0, =1.0.0, =0.0.1, =0.0.4 Source cves:...

EUVD-2024-38187

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-11547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid...

CVE-2024-39685 fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py resample function

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the datadir variable is used directly in a command executed with subprocess.runcmd, shell=True in the resample function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier...

CVE-2024-39685

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the datadir variable is used directly in a command executed with subprocess.runcmd, shell=True in the resample function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier...

CVE-2024-39685 fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py resample function

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the datadir variable is used directly in a command executed with subprocess.runcmd, shell=True in the resample function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier...

CVE-2024-39685: Improper Neutralization of Special Elements used in an OS Command

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the datadir variable is used directly in a command executed with subprocess.runcmd, shell=True in the resample function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier...

PT-2024-28624 · Unknown · Bert-Vits2

Name of the Vulnerable Software and Affected Versions: Bert-VITS2 versions 2.3 and earlier Description: The issue arises from user input being directly used in a command executed with subprocess.runcmd, shell=True in the resample function, leading to arbitrary command execution. This is due to th...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_process_residual_resample_mb

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6151544248336384 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...