Astra Linux – Vulnerability in Apache2

The Apache HTTP Server protocol handler for the HTTP/2 protocol checks the received request headers against the size limitations configured for the server. These restrictions are also applied to the HTTP/1 protocol. If any violations occur, an HTTP response is sent to the client with a status cod...

CVE-2026-74323

A flaw was found in the MediaTek mt7996 Wi-Fi driver within the Linux kernel. When the mt7996txprepareskb routine fails to look up linkconf or linksta, it can lead to a memory leak by not releasing an already allocated transmission token. This issue could potentially impact system stability or...

MINI-843V-2W49-RQ52

Bulletin has no description...

MINI-C8M7-5VP6-MR9J

Bulletin has no description...

MINI-9R98-62R5-PP99

Bulletin has no description...

CVE-2026-62377

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...

CVE-2026-70939

Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...

CVE-2026-72496

creationtimestamp| type| source ---|---|--- 2026-08-17 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbttbdppn2t...

MINI-4P4G-QCQF-977M

Bulletin has no description...

CVE-2026-74320

In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding code The code that gets the frame buffer mode from OF has 'use after free', 'buffer overrun' and memory leaks. info-ediddata isn't free if the probe functions fail or if pd-defmode ...

CVE-2026-72367

In the Linux kernel, the following vulnerability has been resolved: iomap: guard iosize EOF trim against concurrent truncate underflow iomap: fix zero padding data issue in concurrent append writes changed ioend accounting so that iosize tracks only valid data within EOF. This trims iosize when a...

CVE-2026-72340

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...

CVE-2026-72016

In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhpsmtenable On arm64, when booting with maxcpus greater than the number of present CPUs e.g., QEMU -smp cpus=4,maxcpus=8, some CPUs are marked as 'present' but have not yet been...

CVE-2026-73608

SiYuan's development branch endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4 contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no authorization...

ROS-20260813-73-0032

The vulnerability in Gitea relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability allows a malicious actor to cause service failures through specially created IPv6 traffic...

netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by repeatedly closing Redis pipeline connections before a Redis array aggregate completes. This leads to a permanent leak of direct-memory buffers, which prevents memory chunks from being returned to the share...

CVE-2026-48158

creationtimestamp| type| source ---|---|--- 2026-08-11 03:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msro5xarkn2n...

CVE-2026-64301

A flaw was found in the Linux kernel's regulator subsystem. An issue in the scmiregulatorprobe function can lead to a reference count leak. This occurs when an error path is triggered during device node processing, causing a resource to not be properly released. Over time, this unreleased resourc...

Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

Summary A memory leak can be caused in Netty's DNS codec by sending malicious DNS packets containing invalid domain names. Because the leak occurs incrementally per packet, sustained malicious requests will cause a gradual Denial of Service. Details Inside...

GHSA-3V2J-6FW9-F57C MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters

Impact Users below reportissuesforunreleasedversionsthreshold can assign unreleased product versions. Patches - https://github.com/mantisbt/mantisbt/commit/17072d4c322c85f7135ebec3417a6d90b525d12f Workarounds None Resources - https://mantisbt.org/bugs/view.php?id=37065 Credits MantisBT thanks...