EUVD-2026-75041

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

CVE-2026-83530 Uncontrolled Memory Allocation in cel-go

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation, allowing attackers to cause service interruptions.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation, allowing attackers to cause service interruptions.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the kvm_riscv_vcpu_alloc_vector_context() function in the arch/riscv/kvm/vcpu_vector.c module, which is part of the Linux operating system’s RISCV processor support, allows a attacker to cause a service failure.

The vulnerability of the kvmriscvvcpuallocvectorcontext function in the arch/riscv/kvm/vcpuvector.c module, which is part of the Linux operating system’s RISCV processor support, involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2026-84888 RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-84289 NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation

A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function listtools of the file tools/mcptool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The...

Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without proper limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...

dotnet: .NET: Denial of Service due to uncontrolled resource allocation

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...

ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without proper limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...

The vulnerability of the drm/pthor component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drm/pthor component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

PT-2026-78460

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to uncontrolled resource consumption, which occurs when a system fails to limit the amount of resources such...

EUVD-2026-61173

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

ROS-20260817-73-0207

The vulnerability in python-pillow is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2026-74788 Scriban before 7.0.0 Denial of Service via string.pad_left/pad_right

Scriban before 7.0.0 affected versions = 6.6.0 contains an uncontrolled memory allocation vulnerability in the string.padleft and string.padright template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes...

CVE-2026-74788

CVE-2026-74788 affects Scriban before 7.0.0 (affected versions ≤ 6.6.0). The vulnerability resides in the template functions string.pad_left and string.pad_right , which do not validate the width parameter before delegating to .NET’s String.PadLeft/PadRight. An attacker can supply an extremely la...

thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation

A flaw was found in Apache Thrift Java bindings. This vulnerability, categorized as an Allocation of Resources Without Limits or Throttling, allows a remote attacker to cause a denial of service by exhausting system resources. The flaw occurs when the application fails to properly limit or thrott...

The vulnerability of adding additional tools and integration libraries for the Go language that use OpenTelemetry, related to uncontrolled memory allocation, allows attackers to trigger a memory exhaustion condition.

The vulnerability of adding additional tools and integration libraries for the Go language with OpenTelemetry is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause memory exhaustion...

CVE-2026-66485

GNU cpio is affected by an uncontrolled memory allocation in make_path (src/makepath.c) that uses alloca based on the length of argpath, derived from an archive-controlled pathname during extraction. A crafted cpio archive with a long nested pathname can trigger unbounded stack allocation, causin...