psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

Summary PSDImage.composite and .numpy allocate the output image buffer from the PSD's header geometry width × height × channels × depth, and per-layer rectangles before validating those values against the actual file contents. A tiny crafted PSD declaring huge dimensions causes a multi-gigabyte...

CVE-2026-59991

The psd-tools Python package, used for processing Adobe Photoshop PSD files, contains an uncontrolled memory allocation vulnerability in the PSDImage.composite() and PSDImage.numpy() functions. Prior to version 1.17.4 , the software allocated output buffers based on attacker-controlled header geo...

CVE-2026-59991 psd-tools: Uncontrolled memory allocation in psd-tools composite/numpy via crafted PSD geometry

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those value...

CVE-2026-59991 psd-tools: Uncontrolled memory allocation in psd-tools composite/numpy via crafted PSD geometry

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those value...

CVE-2026-81886

radare2 is a UNIX-like reverse engineering framework. Prior to 6.2.0 , its Windows 64-bit crash-dump (dmp64) parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loop without validating the count against the actual dump size. Opening a small...

CVE-2026-32941

Sliver C2 中存在一个框架级漏洞，允许未认证的远程用户通过触发不受控制的内存分配（CWE-789 / CWE-400）来实施拒绝服务，导致进程级内存耗尽（OOM）崩溃。 参考：Tenable 复现步骤： 1. 提取凭据：从捕获或生成的 Sliver 植入体中获取 mTLS 证书和私钥。 2. 编辑 PoC：打开 mtlspoc.go，将 var 块中的占位符值（c2Endpoint、clientCertPEM、clientKeyPEM）替换为你提取的凭据。 对 Sliver 服务器运行漏洞利用程序： root@kitploit: go run mtlspoc.go...

NPM: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

NPM: adm-zip: Uncontrolled memory allocation via the declared uncompressed size DoS vulnerability discovered by ? in WordPress Npm adm-zip versions 0.6.1...

CVE-2026-77301

adm-zip is a Node.js JavaScript library for creating and extracting ZIP archives. Prior to version 0.6.1 , the getData() function in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and de...

EUVD-2026-83170

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and decompression result. A...

EUVD-2026-82568

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...

CVE-2026-93307

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...

CVE-2026-93307

CVE-2026-93307 affects the VES Collector component in O-RAN-SC SMO OAM (version 2025-06-10). The vulnerability stems from manipulation of the additionalFields.padding argument, which leads to uncontrolled memory allocation . An attacker with low privileges can exploit this remotely , resulting in...

CVE-2026-83530

cel-go , the Go implementation of the Common Expression Language (CEL), is affected by an uncontrolled memory allocation vulnerability. A user can supply an expression whose string length exceeds the ParserExpressionSizeLimit() configured on the CEL environment, causing a memory allocation propor...

CVE-2026-83530 Uncontrolled Memory Allocation in cel-go

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

CVE-2026-72923

Microsoft.OpenApi.YamlReader (versions 2.0.0-preview.11 through 2.12.0 and 3.0.0 through 3.10.0) and Microsoft.OpenApi.Readers (prior to 1.6.30) are vulnerable to a denial of service via YAML alias expansion. The root cause lies in how SharpYaml represents aliases as shared nodes in a directed ac...

grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates

A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...

grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates

A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...

EUVD-2026-70293

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-84888

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-84888

RightNow-AI OpenFang up to version 0.6.9 contains a vulnerability in the shell_exec function within crates/openfang-runtime/src/tool_runner.rs. The flaw causes uncontrolled memory allocation , exploitable remotely with low privileges and no user interaction. The primary impact is low availability...