3886 matches found
DEBIAN-CVE-2026-56852
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-111554 CVE-2026-56852 affecting package kubevirt-openvmm 1.9.0-1
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93225 CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-56852
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-56852
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-56852
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-56852 Infinite loop on invalid input in golang.org/x/text
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-56852
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-56852
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
Malicious code in utf-cleaner (PyPI)
Source: kam193 09b9e5c5deafbf756df5201976fdbdc3c61c10e815234df9aeb32764a3cd9652 During import, the package silently downloads and executes remote code. This code starts a web server in the separate process and listens for commands to execute from a C2 server, as well as periodically sends a beaco...
Malicious Package
Overview utf-cleaner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
CVE-2026-56852: Loop with Unreachable Exit Condition
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-56852: Loop with Unreachable Exit Condition
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
OPENSUSE-SU-2026:21395-1 Security update for trivy
This update for trivy fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266495. - CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during...
CLSA-2026-1784553427 perl-XML-LibXML: Fix of CVE-2026-8177
CVE-2026-8177: fix out-of-bounds read on truncated multi-byte UTF-8 node names replace hand-rolled domParseChar with libxml2 xmlValidateName...
CVE-2026-42566
The CVE affects Meshtastic firmware prior to 2.7.23.b246bcd where a single node advertising a User.long_name containing malformed UTF-8 over LoRa can render other radios unusable over BLE when managed via the iOS app. Root cause: a null terminator can be placed in the middle of a multibyte sequen...
CVE-2026-42566 Meshtastic: Malformed UTF-8 in User.long_name broadcast over LoRa causes mesh-wide client decode failure
Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.longname that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
JLSEC-2026-773
The bsonvalidate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that re...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...