CVE-2025-39866

CVE-2025-39866 - use-after-free Author: Byte Reaper Description This POC attempts to exploit the CVE-2025-39866 vulnerability, which is a flaw in Linux systems iwb” and schedules the critical free via “wbputmany”. step 3 : - thread 2 : free wbolb - thread 1 - pointer - free object wb free old -...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not treat wbconnector as a physical device in createvalidatestreamforsink. Do not attempt to operate on drmwbconnector as an amdgpudmconnector. While dereferencing connector-base may “work”, it is incorrect an...

MAL-2026-15832 Malicious code in @viertechjs/wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf0b89516ea99431b2f9d6629a3418779813f156d84bb4f3018dec0707b04a6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview @viertechjs/wb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @viertechjs/wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf0b89516ea99431b2f9d6629a3418779813f156d84bb4f3018dec0707b04a6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

org.codefilarete.stalactite:core-mariadb-adapter (1.0.0), org.codefilarete.stalactite:sql-mariadb-adapter (1.0.0) +5 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.codefilarete.stalactite:core-mariadb-adapter 1.0.0 -...

org.codefilarete.stalactite:core-mariadb-adapter (1.0.0), org.codefilarete.stalactite:sql-mariadb-adapter (1.0.0) +5 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.codefilarete.stalactite:core-mariadb-adapter 1.0.0 -...

CVE-2026-68239

CVE-2026-68239 affects the Linux kernel DRM TTM code, specifically the ttm_pool_backup path. The issue arises because ttm_pool_backup could encounter NULL or backup handle entries (ttm_backup_page_ptr_is_handle()) which were not safely guarded for set_pages_array_wb() and could be freed erroneous...

EUVD-2026-55483

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mapping leak amdgpupciremove calls drmdevunplug before invoking the driver fini routines. This causes drmdeventer in amdgputtmfini to always return false, so iounmapaperbasekaddr never runs on normal driv...

agentyc (>=0.1.0, <=0.3.3), aiagents4pharma (>=0.0.0, <=1.49.1) +86 more potentially affected by CVE-2026-59936 via pypdf (>=6.0.0, <=6.13.3)

pypdf PYPI version =6.0.0, =0.1.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =3.1.0, =0.12.6.post1, =0.2.0, =0.2.0, =0.0.3, =0.4.1, =6.2.61, =6.4.21 and more Source cves: CVE-2026-59936 Source advisory: GHSA-5XF7-4P34-54QR...

CVE-2026-64050

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed becaus...

CVE-2026-64050

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed becaus...

agentyc (>=0.1.0, <=0.3.3), aiagents4pharma (>=0.0.0, <=1.49.1) +86 more potentially affected by CVE-2026-59937 via pypdf (>=6.0.0, <=6.13.3)

pypdf PYPI version =6.0.0, =0.1.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =3.1.0, =0.12.6.post1, =0.2.0, =0.2.0, =0.0.3, =0.4.1, =6.2.61, =6.4.21 and more Source cves: CVE-2026-59937 Source advisory: SNYK:PYTHON-PYPDF-17895064...

agentyc (>=0.1.0, <=0.3.3), aiagents4pharma (>=0.0.0, <=1.49.1) +78 more potentially affected by CVE-2026-49461 via pypdf (>=6.0.0, <=6.12.1)

pypdf PYPI version =6.0.0, =0.1.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =3.1.0, =0.12.6.post1, =0.2.0, =0.2.0, =0.0.3, =0.4.1, =6.2.61, =6.4.21 and more Source cves: CVE-2026-49461 Source advisory: OSV:GHSA-J543-4VMF-QM7V...

com.coherentlogic.coherent.data-model:data-model-core (>=1.0.15-release, <=1.0.16-release), com.coherentlogic.coherent:data-model (>=1.0.15-release, <=1.0.16-release) +412 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.0.5.release)

org.springframework:spring-expression MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.coherentlogic.coherent.data-model:data-model-core =1.0.15-release,...

com.coherentlogic.coherent.data-model:data-model-core (>=1.0.15-release, <=1.0.16-release), com.coherentlogic.coherent:data-model (>=1.0.15-release, <=1.0.16-release) +155 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.0.5.release)

org.springframework:spring-webmvc MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.coherentlogic.coherent.data-model:data-model-core =1.0.15-release, =1.0.15-releas...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +67 more potentially affected by CVE-2026-41168 via pypdf (>=6.0.0, <=6.10.0)

pypdf PYPI version =6.0.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =3.1.0, =0.2.0, =0.2.0, =0.0.3, =0.4.1, =6.2.61, =1.0.20, =1.0.31 and more Source cves: CVE-2026-41168 Source advisory: GHSA-JJ6C-8H6C-HPPX...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +65 more potentially affected by CVE-2026-40260 via pypdf (>=6.0.0, <=6.9.2)

pypdf PYPI version =6.0.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =3.1.0, =0.2.0, =0.2.0, =0.0.3, =0.4.1, =6.2.61, =1.0.20, =1.0.31 and more Source cves: CVE-2026-40260 Source advisory: SNYK:PYTHON-PYPDF-15989793...

PT-2026-5498

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476466137 Crash type: Heap-buffer-overflow WRITE 1 Crash state: vpx wb write literal vp9 pack bitstream encode frame to data rate...

MAL-2026-265 Malicious code in @wb-team/uikit-myteam-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf39991881d2a08d3aa421675b4c1a7b562a4b50c70e7d9c0f7bb54a0d8f0e4 The package @wb-team/uikit-myteam-web was found to contain malicious code. Source: ghsa-malware...