160 matches found
CVE-2026-59604
In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-59604
A logic error in video decoder firmware allows an attacker to trigger an unbounded loop in multiple locations. This vulnerability can lead to a local denial of service (DoS) without requiring additional execution privileges or user interaction. No specific affected versions or remediation details...
EUVD-2026-122650
In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-123607
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Upstream attackers can return NoData or NXDomain responses...
CVE-2026-123607 Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Upstream attackers can return NoData or NXDomain responses...
EUVD-2026-119366
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Upstream attackers can return NoData or NXDomain responses...
CVE-2026-123607
The hickory-dns project contains an unbounded loop vulnerability in hickory-proto versions 0.25.0-alpha.3 through 0.25.2 and hickory-net versions before 0.26.1. The flaw exists within the DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. A...
PT-2026-139888
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Upstream attackers can return NoData or NXDomain responses...
CVE-2026-123607: hickory-dns: Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop…
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Upstream attackers can return NoData or NXDomain responses...
PUB-A-508715031
In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
netbsd_hfs
NetBSD hfs local overflow Bug details: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the size of the node...
FreeBSD : jackson-core -- denial of service (6a9d0f14-cf3d-11f1-a655-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6a9d0f14-cf3d-11f1-a655-3497f65b111b advisory. The Jackson project reports: CVE-2026-89407: NumberInput.looksLikeValidNumber pre-validates...
Important: jackson-core
Issue Overview: NumberInput.looksLikeValidNumber in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERNFLOAT +-?0-9\.?0-9+eE+-?0-9+?, present since 2.17.0, and PATTERNFLOATTRAILINGDOT, added in 2.17.2. PATTERNFLOAT places adjacent quantifiers over the...
Denial Of Service (DoS)
figlet.js is vulnerable to Denial Of Service DoS. The vulnerability is due to an unbounded loop when whitespaceBreak is enabled and the configured width is smaller than a rendered FIGlet character, which allows an attacker to trigger repeated processing that consumes excessive CPU and memory,...
NPM: figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
NPM: figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width vulnerability discovered by ? in WordPress Npm figlet versions 1.11.3...
EUVD-2026-91058
figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width...
figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
Impact A denial-of-service infinite loop can occur in text / textSync when both: - whitespaceBreak: true is set, and - width is set smaller than the rendered width of a single FIGlet character. Under these conditions breakWord could never find a valid break point, so the word-wrapping loop in...
GHSA-62CH-8VMQ-8XM7 figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
Impact A denial-of-service infinite loop can occur in text / textSync when both: - whitespaceBreak: true is set, and - width is set smaller than the rendered width of a single FIGlet character. Under these conditions breakWord could never find a valid break point, so the word-wrapping loop in...
CVE-2026-94645 Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound
Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-96780 figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.11.3, text and textSync can enter an unbounded loop when whitespaceBreak is enabled and width is smaller than the rendered width of a single FIGlet character. Under these conditions,...