1017 matches found
CVE-2026-117501
A flaw was found in HTTP::Body. By sending crafted chunked HTTP requests with malformed chunk sizes, a remote attacker can cause the parser to continuously buffer incoming data in memory. This issue leads to excessive memory consumption, resulting in a Denial of Service DoS for the affected...
Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-10743)
Summary IBM MQ has addressed a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations. Vulnerability Details CVEID:CVE-2026-10743 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.18. It arises when cifsdotruncate updates isize without a cached handle; when findwritablefile returns null, no setfilesize operation is performed, causing isize to be set to 0. Subsequently, if cifsopen fails, the inode size becomes 0 whi...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because ntfs3 fails to properly handle block sizes larger than PAGESIZE when using bufferheads; it also fails to handle errors related to setblocksize. During mounting, a...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 3.2; it stems from the failure to validate the pitch and box sizes received from user space prior to copying data from the underlying surface. This may lead to an out-of-bounds read...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises because lan966xfdmareload fails to restore rx-pageorder and rx-maxmtu upon failure to reload, as well as fails to restore the old page pool registration for XDP RXQs on each...
CVE-2026-98741
In the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched capture/playback packet sizes detectusbformat cross-checks bSubframeSize, bBitResolution and tSamFreq between the capture and playback interfaces, but never relates the two endpoints' wMaxPacketSize...
CVE-2026-98585
In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Avoid rounding zero ring sizes rounduppowoftwo is undefined for zero. ethtool permits a zero ring size to reach the driver, where the minimum-size check should reject it. Leave zero unchanged while rounding nonzero ri...
CLSA-2023-1686585068 kernel: Fix of 30 CVEs
cgroup: Use open-time cgroup namespace for process migration perm checks CVE-2021-4197 - cgroup: Use open-time credentials for process migraton perm checks CVE-2021-4197 - cgroup: cgroup.procs,threads factor out common parts - cgroup: unify attach permission checking - vt: drop old FONT ioctls...
EUVD-2026-102892
MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input...
CVE-2026-105273
MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input...
CVE-2026-105273: Loop with Unreachable Exit Condition
MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input...
PT-2026-115618
Name of the Vulnerable Software and Affected Versions MP4Parser affected versions not specified Description MP4Parser fails to properly validate MP4 box sizes. This allows a malformed box to cause the parsing process to stall, resulting in no forward progress as the system repeatedly processes th...
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Configuring a small gsomaxsize/gsoipv4maxsize results in an underflow in skdstgsomaxsize, which may trigger a BUGON crash, as sk-skgsomaxsize would be much larger than th...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 allows Heap-based Buffer Overflows because it mishandles the "-F’.‘” syntax on the command line. This may allow privilege escalation from any user to root. This issue occurs due to the incorrect interpretation of negative sizes in the strncpy function...
CLSA-2026-1778788223 libssh2: Fix of 3 CVEs
CVE-2019-3860: bounds-check SFTP packet sizes in sftppacketrequire/v and sftpbin2attr - CVE-2019-3861: bounds-check paddinglength in libssh2transportread...
CVE-2026-109380 modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field
modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks indefinitely, exhausting...
CVE-2026-97910
In the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compress buffer sizes against fixed allocations sprdplatformcompropen allocates the stage 0 IRAM buffer 32K data area and the stage 1 DDR buffer 2M data area with fixed sizes, but sprdplatformcomprcopy derive...
CVE-2026-93019
Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...