CVE-2026-112145 speaches-ai speaches Pyannote Diarization Model Loading pyannote_diarization.py PyannoteDiarizationModelManager._load_fn externally-controlled input to select classes or code

A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager.loadfn of the file src/speaches/executors/pyannotediarization.py of the component Pyannote Diarization Model Loading. The manipulation of th...

Astra Linux – vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.22.0, the URBDRC client used server-provided interface numbers as array indices without any bounds checks, resulting in an out-of-bounds read in libusbudevselectinterface. This vulnerability has been fixed in...

Astra Linux – vulnerability in mariadb

The MariaDB server is a community-developed fork of the MySQL server. In versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1, MariaDB permitted SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privileg...

PT-2026-117621

Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non-string arrow arguments as callables without the checkArrow guard used by other arrow-accepting filters. Authenticated control panel users can pass an...

CVE-2026-112145: Use of Externally-Controlled Input to Select Classes or Code

A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager.loadfn of the file src/speaches/executors/pyannotediarization.py of the component Pyannote Diarization Model Loading. The manipulation of th...

Linux kernel daemonize Heap Buffer Overflow DoS

The vulnerability in the daemonize function within the tools/power/x86/intel-speed-select/isst-daemon.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the...

CVE-2026-112075: Use of Externally-Controlled Input to Select Classes or Code

A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentenceTransformer.istransformermoduleref of the file unsloth/models/sentencetransformer.py. This manipulation of the argument Type causes use of externally-controlled input to select classes or...

PT-2026-128375

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix slab-out-of-bounds read in ieee80211 monitor select queue ieee80211 monitor select queue validates the skb length using skb-len before dereferencing pointers into skb-data to access the 802.11 header. However,...

PT-2026-117029

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds read exists in the mac80211 wifi component. The function ieee80211 monitor select queue validates the socket buffer skb length using the skb-len variable before...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect, a sanity check is performed on the block descriptor length to prevent UAF. BUG: KASAN: use-after-free in respmodeselect+0xa4c/0xb40...

Astra Linux – Vulnerability in xorg-server

A vulnerability was discovered in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where X is used...

Astra Linux – vulnerability in mariadb-10.3

MariaDB versions up to 10.5.9 allow an application crash due to certain long SELECT DISTINCT statements that improperly interact with storage engine resource limitations when handling temporary data structures...

Astra Linux – vulnerability in sqlite3

A flaw was found in SQLite’s SELECT query functionality src/select.c. This flaw allows an attacker capable of executing SQL queries locally on the SQLite database to cause a denial of service or potential code execution by triggering a use-after-free. The primary threat posed by this vulnerabilit...

Astra Linux – Vulnerability in SQLite3

The flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN where the right-hand side is a view. This can lead to a NULL pointer dereference or incorrect results...

Astra Linux – vulnerability in sqlite3

In SQLite up to version 3.31.1, the ALTER TABLE implementation contains a use-after-free vulnerability, as demonstrated by an ORDER BY clause within a compound SELECT statement...

CVE-2026-109337

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hidden by field-level SELECT permissions using LIVE SELECT WHERE predicates over $before or $after. Attackers can craft repeated predicates and observe whether notifications are...

CVE-2026-109336

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by field-level SELECT permissions through LIVE SELECT projections. Attackers can project restricted fields from the unreduced $after or $before parameters under an alias to receive...

CVE-2026-109337 SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE Clause

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hidden by field-level SELECT permissions using LIVE SELECT WHERE predicates over $before or $after. Attackers can craft repeated predicates and observe whether notifications are...

CVE-2026-109337

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hidden by field-level SELECT permissions using LIVE SELECT WHERE predicates over $before or $after. Attackers can craft repeated predicates and observe whether notifications are...

EUVD-2026-97639

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hidden by field-level SELECT permissions using LIVE SELECT WHERE predicates over $before or $after. Attackers can craft repeated predicates and observe whether notifications are...