16261 matches found
Amazon Linux 2023 : perl-Net-CIDR-Lite (ALAS2023-2026-1624)
"It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1624 advisory. Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. packipv6 does not check that uncompressed IPv6 addresses without :: have exact...
PT-2026-42304
Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...
PT-2026-42355
Multiple security vulnerabilities affect the atlantis package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...
PT-2026-42356
Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...
JLSEC-2026-306
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
CLSA-2026-1777454082 pcre2: Fix of 2 CVEs
CVE-2022-1586: fix out-of-bounds read in JIT compilexclassmatchingpath - CVE-2022-41409: diagnose negative repeat value in pcre2test...
OSV-2026-650 Use-of-uninitialized-value in Mat_int32Swap
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=506942183 Crash type: Use-of-uninitialized-value Crash state: Matint32Swap ReadCompressedInt32Data MatVarRead5...
The vulnerability of the `sc7180_lpass_init()` function in the sound module/soc/qcom/lpass-sc7180.c, which is part of the Linux operating system’s SoC kernel support for audio, allows a hacker to cause a service failure.
The vulnerability of the sc7180lpassinit function in the sound/soc/qcom/lpass-sc7180.c sound support module of the Linux operating system’s SoC kernel is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-39354
HDF5 Library through 1.14.3 may use an uninitialized value in H5A attr release table in H5Aint.c...
PT-2026-39312
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=506942183 Crash type: Use-of-uninitialized-value Crash state: Mat int32Swap ReadCompressedInt32Data Mat VarRead5...
The vulnerability of the moxartprobe() function in the drivers/mmc/host/moxart-mmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the moxartprobe function in the drivers/mmc/host/moxart-mmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `ionic_devlink_alloc()` function in the `drivers/net/ethernet/pensando/ionic/ionic_devlink.c` file of the Pensando Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ionicdevlinkalloc function in the drivers/net/ethernet/pensando/ionic/ionicdevlink.c file of the Pensando Ethernet network adapter driver for the Linux operating system is related to the lack of a check on the returned value. Exploiting this vulnerability could allow an...
The vulnerability of the cros_usbpd_notify_init() function in the drivers/platform/chrome/cros_usbpd_notify.c module, which is part of the Chrome OS hardware support for Linux kernel-based devices, allows a hacker to trigger a service failure.
The vulnerability of the crosusbpdnotifyinit function in the drivers/platform/chrome/crosusbpdnotify.c module, which is part of the Chrome OS hardware support for Linux kernel-based operating systems, stems from the lack of checking the return value. Exploiting this vulnerability could allow an...
The vulnerability of the rtsx_usb_sdmmc_drv_probe() function in the mmc/host/rtsx_usb_sdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtsxusbsdmmcdrvprobe function in the mmc/host/rtsxusbsdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the wmt_mci_probe() function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the wmtmciprobe function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
php:php-fuzz-execute: Use-of-uninitialized-value in is_cacheable_stream_path
Detailed Report: https://oss-fuzz.com/testcase?key=5674034779193344 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: iscacheablestreampath accelmakepersistentkey...
Spring Boot's random value property source uses a weak PRNG unsuitable for secrets
Values produced by $random.value are not suitable for use as secrets. $random.uuid is not affected. $random.int and $random.long should never be used for secrets as they are numeric values with a predictable range. Affected: Spring Boot 4.0.0–4.0.5 fix 4.0.6, 3.5.0–3.5.13 fix 3.5.14, 3.4.0–3.4.15...
GHSA-M4X9-HX6X-2C43 Spring Boot's random value property source uses a weak PRNG unsuitable for secrets
Values produced by $random.value are not suitable for use as secrets. $random.uuid is not affected. $random.int and $random.long should never be used for secrets as they are numeric values with a predictable range. Affected: Spring Boot 4.0.0–4.0.5 fix 4.0.6, 3.5.0–3.5.13 fix 3.5.14, 3.4.0–3.4.15...
CVE-2026-40975
Values produced by $random.value are not suitable for use as secrets. $random.uuid is not affected. $random.int and $random.long should never be used for secrets as they are numeric values with a predictable range. Affected: Spring Boot 4.0.0–4.0.5 fix 4.0.6, 3.5.0–3.5.13 fix 3.5.14, 3.4.0–3.4.15...