24056 matches found
ai.looktech.ltrpc.schema:app-server (>=2.0.0, <=2.7.0), ai.looktech.ltrpc.schema:bt-server (>=2.0.0, <=2.7.0) +102 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (>=6.0.0-alpha01, <=6.4.1)
com.squareup.wire:wire-runtime MAVEN version =6.0.0-alpha01, =2.0.0, =2.0.0, =0.1.2, =0.0.24, =0.1.7, =0.7.27, =0.7.27, =0.7.27, =0.1.33, =0.7.27, =0.7.27, =0.7.41 and more Source cves: CVE-2026-63126 Source advisory: OSV:GHSA-9RM7-3QHH-H2MC...
com.squareup.wire:wire-grpc-client (>=7.0.0-alpha01, <=7.0.0-alpha03), com.squareup.wire:wire-schema (>=7.0.0-alpha01, <=7.0.0-alpha03) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (>=7.0.0-alpha01, <=7.0.0-alpha03)
com.squareup.wire:wire-runtime MAVEN version =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha03 Source cves: CVE-2026-63126 Source advisory: SNYK:JAVA-COMSQUAREUPWIRE-19964080...
com.squareup.wire:wire-grpc-client (>=7.0.0-alpha01, <=7.0.0-alpha03), com.squareup.wire:wire-schema (>=7.0.0-alpha01, <=7.0.0-alpha03) +1 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (>=7.0.0-alpha01, <=7.0.0-alpha03)
com.squareup.wire:wire-runtime MAVEN version =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha03 Source cves: CVE-2026-45799, CVE-2026-63126 Source advisory: GHSA-9RM7-3QHH-H2MC...
com.squareup.wire:wire-grpc-client (>=7.0.0-alpha01, <=7.0.0-alpha03), com.squareup.wire:wire-schema (>=7.0.0-alpha01, <=7.0.0-alpha03) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (>=7.0.0-alpha01, <=7.0.0-alpha03)
com.squareup.wire:wire-runtime MAVEN version =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha03 Source cves: CVE-2026-63126 Source advisory: OSV:GHSA-9RM7-3QHH-H2MC...
com.squareup.wire:wire-grpc-client (4.0.0-alpha.20), com.squareup.wire:wire-schema (4.0.0-alpha.20) potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (4.0.0-alpha.20)
com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.20 - com.squareup.wire:wire-schema...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the ByteArrayProtoReader32 fast path in wire-runtime/src/commonMain/kotlin/com/squareup/wire/ByteArrayProtoReader32.kt. An attacker can crash protobuf decoding by supplying a length-delimited field wit...
CVE-2026-93184: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ASoC: fslaudmix: rework runtime PM handling in probe After pmruntimeenable the AUDMIX block is powered off and stays suspended until the first runtime resume. Register writes issued between probe and the first resume e.g. from DA...
CVE-2026-93169: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmpdma: fix race between runtime PM and device removal In zynqmpdmaremove, runtime PM was disabled only after checking state and doing a manual suspend. This can race with runtime PM in the remove/unbind rmmod path...
CVE-2026-90406: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...
CVE-2026-90282: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...
CVE-2026-90281: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before creating the PHY, since phycreate only enables runtime PM on the PHY device if it is already enabled on this parent...
CVE-2026-90280: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because runtim...
CVE-2026-90249: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...
PT-2026-94159
Name of the Vulnerable Software and Affected Versions NeuVector versions prior to 5.4.11 NeuVector versions prior to 5.5.4 NeuVector versions prior to 5.6.2 Description Improper parameter handling in the packet capture mechanism allows an authenticated user with namespaced Runtime Policies write...
PT-2026-94628
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm runtime...
PT-2026-94629
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur during early runtime suspend in the snps-femto-v2 PHY driver. This happens because runtime Power Management PM callbacks may dereference the hsphy...
PT-2026-95098
Name of the Vulnerable Software and Affected Versions Wire versions prior to 6.4.1 Wire versions prior to 7.0.0-alpha04 Description Wire's Swift runtime fails to reject negative lengths for LENGTH DELIMITED fields when skipping an unknown START GROUP field. A crafted protobuf payload can cause th...
PT-2026-94754
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iris core deinit function where the return value of pm runtime resume and get is not properly checked. If the runtime Power Management PM resume fails, the system...
PT-2026-94965
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the zynqmp dma remove function between runtime Power Management PM and device removal. The issue occurs because runtime PM is disabled only after the system...
