Linux Bluetooth Buffer Overflow DoS

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

EUVD-2026-113442

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

CVE-2026-118947

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

CVE-2026-118947: Red Hat: A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core…

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

OpenTelemetry - CNCF OpenTelemetry Python resource management error vulnerability

OpenTelemetry: Versions prior to 1.45.0 of CNCF’s OpenTelemetry Python contain a resource management error vulnerability. This vulnerability arises because JaegerPropagator.extract fails to limit the number of entries, their size per entry, and the total size when processing incoming uberctx-...

Eugene Russh resource management error vulnerability

Versions of Eugene Russh prior to 0.65.0 contain a resource management error vulnerability. This vulnerability arises because the client accepts a private EXTINFO message with encoded ID 7 via the Session::processpacket path; however, the handleextinfo function adds extension names to...

Apple macOS resource management error vulnerability

A resource management error vulnerability exists in Apple macOS versions prior to Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2. This vulnerability stems from improper memory management leading to double-free issues. Attackers on a local network may exploit this to cause unintended system...

lxsmnsyc seroval resource management error vulnerability

In versions lxsmnsyc seroval from 1.4.1 up to but including 1.6.8, there is a resource management error vulnerability. This vulnerability arises because fromJSON and fromCrossJSON fail to require that the list of elements in array nodes be an actual array. A specially crafted payload can allow...

ROS-20261026-73-0119

The vulnerability in openssh is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261026-73-0097

The vulnerability in openssh is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Mattermost resource management error vulnerability

Versions 11.9.1 and earlier of Mattermost, as well as versions 11.8.5 and earlier, 11.7.10 and earlier, and 11.10.1 and earlier are affected by a resource management error vulnerability. This vulnerability arises because the WebSocket msgpack decoder fails to enforce allocation limits on byte...

ROS-20261026-73-0156

The vulnerability in openssh is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Mattermost resource management error vulnerability

Mattermost versions 11.9.1 and earlier within the 11.9.x series, 11.8.5 and earlier within the 11.8.x series, 11.7.10 and earlier within the 11.7.x series, and 11.10.1 and earlier within the 11.10.x series contain a resource management error vulnerability. This vulnerability arises from the lack ...

BenoitC Hackney resource management error vulnerability

Versions 2.0.0-beta.1 through 4.9.0 of benoitc hackney contain a resource management error vulnerability. This vulnerability arises because hackneyconn fails to restrict or throttle resource allocation; as a result, hackney:request/5 and hackney:body/1 return full response bodies without limiting...

vLLM resource management error vulnerability

Versions prior to vLLM 0.32.0 contain a resource management error vulnerability. This vulnerability arises because the Phi-4 multimodal audio encoder defaults to using eager attention in phi4mmaudio.py and phi4mmutils.py. A remote client can submit a valid long audio segment, causing the full...

CVE-2026-89959

A flaw was found in the Linux kernel's s390/vfio-ap component. An incorrect function was used during the removal of control domains, specifically bitmapandnot instead of bitmapand. This error prevents explicitly unplugged control domains from being properly removed from a Kernel-based Virtual...

Qt resource management error vulnerability

Qt has a resource management error vulnerability stemming from HTTP/2 client support allowing post-free reuse. This may cause client applications running on malicious or compromised HTTP/2 servers to crash, thereby affecting availability...

Pypdf resource management error vulnerability

Versions of pypdf prior to 6.21.2 contain a resource management error vulnerability. This vulnerability arises when an attacker can craft a specially formatted PDF containing a standard cross-reference table with a claimed number of entries exceeding what the file can actually hold. As a result,...

Twisted Matrix Labs Twisted resource management error vulnerability

Versions of Twisted Matrix Labs Twisted prior to 26.10.0rc1 contain a resource management error vulnerability. This vulnerability arises because the twisted.words.xish.domish ExpatElementStream parser fails to limit memory usage for unfinished elements. Unauthenticated remote attackers can exploi...

Twisted Matrix Labs Twisted resource management error vulnerability

Versions of Twisted Matrix Labs Twisted prior to 26.10.0rc1 contain a resource management error vulnerability. This vulnerability arises because twisted.words.protocols.irc.IRC.dataReceived fails to limit line length; it retains bytes without newline characters prior to authentication. As a resul...