CVE-2026-126085

A flaw was found in Active Storage. A remote attacker can bypass application file size validations and storage quotas when direct uploads to Google Cloud Storage GCS are used. The service fails to bind content length restrictions into signed direct-upload URLs, allowing an attacker to upload file...

Linux Distros Unpatched Vulnerability : CVE-2026-126085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2,...

PT-2026-144761

Name of the Vulnerable Software and Affected Versions Active Storage versions prior to 8.1.4.1 Active Storage versions prior to 8.0.5.2 Description Applications using Google Cloud Storage for direct uploads are affected by an issue where the url for direct upload function in...

CVE-2026-103582

A flaw was found in Apache NMS ActiveMQ. The OpenWire protocol parsing component does not properly validate incoming frame sizes or verify that decoded length fields fit within the received frame. A malicious or compromised broker, or an attacker capable of modifying unencrypted network traffic,...

CVE-2026-103582: Apache Software Foundation Apache ActiveMQ NMS OpenWire Client Library: Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package…

Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ the .NET OpenWire client, package Apache.NMS.ActiveMQ before 2.3.0. The OpenWire unmarshalling code trusted the frame size and the length and count fields read from the network. It did not enforce a maximum frame...

PT-2026-136915

Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ the .NET OpenWire client, package Apache.NMS.ActiveMQ before 2.3.0. The OpenWire unmarshalling code trusted the frame size and the length and count fields read from the network. It did not enforce a maximum frame...

CLEANSTART-2026-BS19124 Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure

Security vulnerability affects the sonarqube package. Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure...

CVE-2026-98893

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...

libtiff: Fix of 22 CVEs

CVE-2018-16335: validate file size before chopping up a single strip...

CLSA-2026-1792612283 libtiff: Fix of 22 CVEs

CVE-2018-16335: validate file size before chopping up a single strip...

CLSA-2026-1792608220 libtiff: Fix of 22 CVEs

CVE-2018-16335: validate file size before chopping up a single strip...

Astra Linux – vulnerability in xwayland, xorg-server

A out-of-bounds read flaw was found in the X.Org X server and Xwayland within glXDispChangeDrawableAttributes. An incorrect size validation check allows reading a client-controlled number of bytes beyond the request buffer, resulting in information disclosure. A write path also exists; however, i...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer size Validate the nattr field against the buffer size, preventing out-of-bounds buffer access via user-controlled attribute count. cherry picked from commit...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Make sure the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to preve...

PT-2026-117496

IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations...

CVE-2026-98582

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate received frame size st21nfcahcii2crepack trims a received frame at its EOF marker before removing byte stuffing. It then assumes the truncated frame contains the LLC header and two CRC bytes, and it...

Astra Linux – Vulnerability in exiv2

Exiv2 0.27.2 allows attackers to cause a crash in the Exiv2::getULong function in types.cpp, when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp. This occurs because there is no validation of the relationship between the total size and the offset and size...

Astra Linux – Vulnerability in libraw

LibRaw before 0.20-RC1 lacks a check for the thumbnail size range. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength is used without validating T.tlength...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assumes a certain maximum size for the instructions being emulated. However, the actual size of these operations is determined separately in...

Astra Linux – vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds read vulnerability has been discovered in gstwavparseadtlchunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the dat...