16050 matches found
PT-2026-95697
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the HTTP/1 decoder allows remote attackers to perform HTTP request smuggling due to incomplete validation of malformed Transfer-Encoding headers. By sending specially crafted HTTP...
CVE-2026-93562: Undefined Security Weakness
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls ...
CVE-2026-93573: Inconsistent Interpretation of HTTP Requests
A flaw was found in Netty's HTTP/1.1 decoder. This vulnerability allows a remote attacker to bypass Transfer-Encoding header validation by splitting the Transfer-Encoding field across multiple headers, with the last field containing a non-final transfer coding like gzip or deflate. This bypass ca...
PT-2026-95423
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the HTTP/1.1 decoder allows a remote attacker to bypass Transfer-Encoding header validation. By splitting the Transfer-Encoding field across multiple headers and ensuring the last fie...
AZL-102479 CVE-2026-93159 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...
DEBIAN-CVE-2026-93159
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...
CVE-2026-93096
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Serialize multi-part Get/Set Feature transfers A Get or Set Feature payload larger than the mailbox payload size is split into several mailbox commands. mboxmutex only serializes individual mailbox commands and is...
CVE-2026-93159
CVE-2026-93159 affects the atmel-sha204a hardware RNG driver in the Linux kernel . In the nonblocking RNG path, a work_data structure is allocated to track in-flight asynchronous I2C requests and stored in rng->priv. If the I2C transfer fails, the previous code only logged a warning but left t...
CVE-2026-93159 crypto: atmel-sha204a - fix heap info leak on I2C transfer failure
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...
EUVD-2026-82267
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...
CVE-2026-93159 crypto: atmel-sha204a - fix heap info leak on I2C transfer failure
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...
CVE-2026-93096 cxl/features: Serialize multi-part Get/Set Feature transfers
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Serialize multi-part Get/Set Feature transfers A Get or Set Feature payload larger than the mailbox payload size is split into several mailbox commands. mboxmutex only serializes individual mailbox commands and is...
CVE-2026-90230
CVE-2026-90230 is a heap out-of-bounds read in the Linux kernel's NVMe target (nvmet) authentication path. The function nvmet_auth_negotiate() indexes a fixed idlist[60] array using host-supplied halen/dhlen fields (both u8, max 255) without validating the transfer length, allowing a malicious or...
Incorrect Resource Transfer Between Spheres
Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Incorrect Resource Transfer Between Spheres incomplete filtering of Node.js registered internal symbols across the sandbox boundary. An attacker can...
CVE-2026-25278
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...
CVE-2026-25278 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...
CVE-2026-25278
CVE-2026-25278 is a TOCTOU race condition in Qualcomm's automotive software platform based on QNX . The vulnerability occurs during I2C transfer request processing , where a race between memory allocation and data copying leads to memory corruption . The CVSS v3.1 score is 7.8 (High) with a local...
EUVD-2026-81282
AVideo WWBN/AVideo through 29.0 commit e01e41ecc is vulnerable to cross-site request forgery. objects/videoAddNew.json.php disables AVideo's automatic CSRF guard $global'skipAutoCSRFCheck' and the untrusted-request check $global'bypassSameDomainCheck' merely because 'user' and 'pass' parameters a...
PT-2026-94337
Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.20 Description When operating in prefill/decode disaggregation mode, the prefill bootstrap service exposes an unauthenticated PUT '/route' endpoint. This allows an attacker to poison the KV transfer routing table b...
