5719 matches found
clr
CLR C hecker of L ifetimes and other R efinement types for Zig Video: https://www.youtube.com/watch?v=mf0WzTOe-40 Sponsorship: https://buymeacoffee.com/dnautics discuss on hn: https://news.ycombinator.com/item?id=42923829 discuss on lobste.rs: https://lobste.rs/s/9sitsj/clrcheckerforlifetimesothe...
OSEC-2026-23 Multiple issues in Marshal
Several issues have been discovered in the Marshal module: ANT-2026-K7NTK0FT Stale objcounter across unmarshal calls enables null/freed internobjtable indexing ANT-2026-2NJYQWEX Custom block size wraparound in CODECUSTOMLEN allocation ANT-2026-PJC00M7X Unmarshaler accepts forged Closuretag metada...
CVE-2021-3129
CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...
CVE-2026-98884
The Linux kernel contains a vulnerability in the mmc core where an excessively large max_segs value provided by a host driver can be truncated to zero. This causes mmc_alloc_sg() to request a zero-sized allocation via kmalloc_objs(), returning a ZERO_SIZE_PTR under the SLUB allocator. Subsequent ...
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Summary Affected Object and Source Package: Pillow 12.3.0 Source: PyPI sdist pillow-12.3.0.tar.gz SHA-256: 3b8182a766685eaa002637e28b4ec8d6b18819a0c71f579bf0dbaa5830297cce Sink: src/imaging.c:2809:15, xsize += dx Details The code in Pillow 12.3.0 is: c for xsize = 0; text; text++ int dx =...
SUSE CVE-2026-101201
A malformed header in the binary file fed to QBinaryJson::fromBinaryData can cause undefined behaviour because of out-of-bounds read...
CVE-2026-89876
A flaw was found in the Linux kernel's media driver for tda18250. An integer overflow can occur when a specific variable, exp, is zero, leading to undefined behavior. This issue arises from a shift operation 1 exp - 1 which can result in unexpected system behavior...
CVE-2026-93121
A flaw was found in the Linux kernel's USB gadget function filesystem ffs component. Specifically, an issue in the ffsdmabuftransfer function's error handling can lead to undefined behavior. This occurs when a fence object is prematurely deallocated without proper initialization, potentially...
CVE-2026-101201
A malformed header in the binary file fed to QBinaryJson::fromBinaryData can cause undefined behaviour because of out-of-bounds read...
EUVD-2026-104838
A malformed header in the binary file fed to QBinaryJson::fromBinaryData can cause undefined behaviour because of out-of-bounds read...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31624)
In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp reportsize in s32ton to avoid undefined shift s32ton shifts by n-1 where n is the field's reportsize, a value that comes directly from a HID device. The HID parser bounds reportsize only to 32 clamp to the functi...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46065)
In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fbinfo Hold state of deferred I/O in struct fbdeferrediostate. Allocate an instance as part of initializing deferred I/O and remove it only after the final mapping...
Linux Distros Unpatched Vulnerability : CVE-2026-98678
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: ad4030: fix invalid oversamplingratio validation In ad4030setavgframelen, the logarithm is calculated before input validation. Passing zero or negativ...
Linux Distros Unpatched Vulnerability : CVE-2026-98585
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: Avoid rounding zero ring sizes rounduppowoftwo is undefined for zero. ethtool permits a zero ring size to reach the driver, where the minimum-size...
PT-2026-118266
A malformed header in the binary file fed to QBinaryJson::fromBinaryData can cause undefined behaviour because of out-of-bounds read...
firefox: thunderbird: Undefined behavior in the DOM: Streams component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the DOM: Streams component...
firefox: thunderbird: Undefined behavior in the DOM: Streams component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the DOM: Streams component...
firefox: thunderbird: Undefined behavior in the DOM: Streams component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the DOM: Streams component...
firefox: thunderbird: Undefined behavior in the DOM: Streams component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the DOM: Streams component...
firefox: thunderbird: Undefined behavior in the DOM: Streams component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the DOM: Streams component...