517 matches found
CVE-2026-80783
CVE-2026-80783 affects the Linux kernel's HID magicmouse driver. The function magicmouse_raw_event() handles DOUBLE_REPORT_ID (0xf7) packets by splitting them and recursing on each half. The only guard was a size
EUVD-2026-71426
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...
CVE-2026-80783
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...
CVE-2026-80783 HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...
CVE-2026-77465
toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue, peg$parsearray, and peg$parseinlinetableentry functions recurse through nested arrays and inline tables without a depth...
CVE-2026-39376
CVE-2026-39376 CVE-2026-39376meta-refresh 체인을 통한 무한 리다이렉트 루프 DoS 요약 parse가 태그를 포함한 HTML 페이지를 반환하는 URL을 가져올 때, 리다이렉트 URL로 자신을 재귀적으로 호출합니다 — 깊이 제한, 방문 URL 중복 제거, 리다이렉트 횟수 상한이 전혀 없습니다. 공격자가 제어하는 서버가 무한한 HTML meta-refresh 응답 체인을 반환하면 무제한 재귀가 발생하여 Python 호출 스택을 고갈시키고 프로세스를 중단시킵니다. 이 취약점은 초기 URL 검사를 우회...
PT-2026-85248
Name of the Vulnerable Software and Affected Versions toml-node versions prior to 4.2.0 Description A remote unauthenticated attacker can cause a denial of service in Node.js applications by providing a specially crafted TOML document. The toml.parse function uses a recursive-descent parser that...
CVE-2026-26903-PoC
CVE-2026-26903 PoC TanStack Query의replaceEqualDeep 함수의 무제한 재귀로 인한 서비스 거부Denial-of-service 깊게 중첩된 객체가 포함된 단일 조작된 쿼리 업데이트는 JavaScript 스레드를 무기한 정지 시켜 애플리케이션 전체가 응답하지 않게 만들 수 있습니다. 인증이나 특별한 권한은 필요하지 않습니다. 영향을 받는 버전 이 취약점은 2026년 1월 14일에 게시된 PR 10032을 통해 @tanstack/[email protected]에서 수정되었습니다...
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars
nltk.parse.RecursiveDescentParser and SteppingRecursiveDescentParser enumerate parses top-down with no bound on the number of recursive steps. A small, crafted context-free grammar makes a short input consume unbounded CPU and/or exhaust the Python recursion stack, pinning a process indefinitely ...
SUSE CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
EUVD-2026-69727
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
DEBIAN-CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
Linux Distros Unpatched Vulnerability : CVE-2026-81928
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigda...
CVE-2026-81928
Net::DNS versions before 1.57 for Perl are vulnerable to memory exhaustion via unbounded recursion in the sig_data function. The root cause: when re-encoding a decoded DNS message containing a misplaced TSIG record (in the answer or authority section rather than the additional section) with an em...
CVE-2026-81928 Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
php: PHP: Denial of Service via circular symbolic links in phar archives
A flaw was found in PHP. When processing a specially crafted PHP Archive phar file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program's memory stack, causing the PHP application to crash. This vulnerability could allow...
php: PHP: Denial of Service via circular symbolic links in phar archives
A flaw was found in PHP. When processing a specially crafted PHP Archive phar file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program's memory stack, causing the PHP application to crash. This vulnerability could allow...
PT-2026-84543
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig data when re-encoding a message with a misplaced TSIG record. sig data signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...