A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. This vulnerability can be triggered by an attacker providing a specially crafted Ruby source file, causing the parser to pass a NULL pointer to nonnull string handling functions, which results in undefined behavior and an application crash. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
Suricata versions prior to 7.0.16 and 8.0.5 have a vulnerability in the HTTP/2 decompression path where the decompressed response-body buffer can grow without an effective upper bound. This can lead to excessive memory allocation when processing crafted HTTP/2 DATA payloads with high compression ratios such as gzip, deflate, or brotli. The issue is fixed in versions 7.0.16 and 8.0.5. A workaround is to disable HTTP/2 processing.
The Node.js library 'cookies', used by Koa via ctx.cookies, has a Set-Cookie attribute injection vulnerability in versions before 0.9.2. The domain and path options are validated permissively, allowing semicolons and enabling injection of additional cookie attributes. This can override security attributes like SameSite, Secure, HttpOnly, or Domain on cookies issued by the application. The issue is fixed in version 0.9.2 by stricter validation of domain and path values. Applications should avoid using untrusted input for these options as a workaround.
A vulnerability in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection disables TLS certificate validation on every request. The modules do not provide an option to re-enable certificate validation while sending HTTP Basic-Auth credentials to an HTTPS endpoint. This flaw allows a network attacker positioned between the Ansible controller and the OCAPI-managed device to intercept and tamper with communications and capture credentials.
A vulnerability in the memcached cache plugin of the community.general Ansible collection allows remote code execution. The plugin relies on python-memcached which pickles data without explicit serialization, enabling an attacker with network access to a memcached instance to inject malicious pickle payloads. These payloads are deserialized and executed on the Ansible controller when the poisoned cache is read. The flaw affects multiple specific versions of the Ansible collection.
CVE-2026-79602 is a vulnerability in Xen where a guest with a PCI device assigned that has at least a Base Address Register (BAR) on the IO port space can trigger a BUG() in Xen. This can lead to high impact including confidentiality, integrity, and availability loss. The vulnerability affects multiple specific Ubuntu Xen package versions.
A vulnerability in the Ocaml implementation of Xenstored allows unbounded accumulation of watches in two data structures, leading to unbounded memory usage and potential system-wide denial of service. This affects all Xen versions from 4.6 onwards using the Ocaml Xenstored implementation. The C Xenstored implementation is not vulnerable.
A medium-severity vulnerability (CVE-2026-86317) exists in ggml-org llama.cpp up to version 0.4.0 affecting the RPC Server component. The flaw is in the rpc_server::deserialize_tensor function, where manipulation of the argument 'ne' can trigger an assertion failure. This vulnerability is remotely exploitable and impacts availability without affecting confidentiality or integrity. The related GitHub issue was closed due to inactivity, and no patch or official fix information is provided.
ImageMagick versions before 7.1.2-30 and 6.9.13-55 contain a memory leak vulnerability in the MSL image decoder. This flaw allows crafted MSL images to trigger memory allocation without proper deallocation, potentially exhausting system memory and causing a denial of service. The vulnerability has a CVSS score of 7.5, indicating a medium severity level. It affects multiple Ubuntu package versions of ImageMagick 6.7.7.10. No known exploits are reported in the wild.
ImageMagick versions before 7.1.2-30 on Windows contain a time-of-check-time-of-use (TOCTOU) vulnerability in path policy enforcement. This flaw allows attackers to bypass read or write restrictions by exploiting symlink race conditions, swapping symlinks between policy validation and file access to access files that should be denied. The vulnerability has a medium severity with a CVSS score of 3.3.
ImageMagick versions before 7.1.2-30 and 6.9.x before 6.9.13-55 contain a heap-use-after-free vulnerability in the GetList method of PerlMagick. This vulnerability can be triggered by a crafted call to the GetList method, causing a crash and resulting in denial of service. The CVSS score is 5.5, indicating a medium severity impact with no confidentiality or integrity loss but availability impact due to crashes.
ImageMagick versions before 7.1.2-30 and 6.9.13-55 contain a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder. This flaw allows attackers to bypass path policy write restrictions by exploiting symlink swaps between the policy validation and file write operations. The vulnerability has a medium severity rating with a CVSS score of 2.5.
ImageMagick versions before 7.1.2-30 and 6.9.x before 6.9.13-55 contain a heap-use-after-free vulnerability in the Layer method of PerlMagick. This flaw allows an attacker who supplies a crafted list of images to trigger memory access after deallocation, causing a crash and resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5.
A heap out-of-bounds write vulnerability exists in Exiv2's RemoteIo component when reading data from a malicious remote server in WebReady/Curl builds. This issue is tracked as CVE-2026-68546 and affects multiple specific versions of Exiv2. The severity is assessed as medium based on the available information.
A heap out-of-bounds read vulnerability exists in the RemoteIo component of Exiv2 when reading block-aligned remote CRW files. This issue is identified as CVE-2026-68547 and affects multiple specific versions of Exiv2. The severity is assessed as medium.
CVE-2026-71223 is a medium severity vulnerability affecting multiple specific versions of the gfs2-utils package. The exact nature and technical details of the vulnerability are unknown as no description or CVSS score is provided. The affected versions span several releases from 3.1.6 through 3.6.1 across various Ubuntu distributions.
Twig is a PHP template language with a vulnerability in versions from 1.0.0 up to but not including 3.27.0. The SecurityPolicy::checkMethodAllowed() function incorrectly whitelists all method calls on instances of Twig\Markup and its subclasses, allowing sandboxed templates to access every public method of these subclasses regardless of configured restrictions. This issue has been fixed in version 3.27.0.
CVE-2026-71196 is a medium severity vulnerability affecting multiple specific versions of the Glance software package as distributed in Ubuntu. The exact nature and technical details of the vulnerability are unknown based on the provided data. There is no CVSS score or detailed description available, and no known exploits have been reported in the wild. The affected versions span a wide range of Ubuntu package releases for Glance, including versions from 2:11.0.0-0ubuntu1 through 2:33.0.0-0ubuntu1 and related variants.
CVE-2026-71197 is a medium severity vulnerability affecting multiple specific versions of the Glance product as packaged for Ubuntu. The exact nature and technical details of the vulnerability are not provided in the available data.
A use-after-free and dangling pointer vulnerability exists in the TLS session handling of OpenVPN, identified as CVE-2026-84471. This vulnerability affects multiple specific versions of OpenVPN, primarily those distributed in various Ubuntu releases. The flaw could potentially lead to high impact consequences due to improper memory handling during TLS sessions. A patch is available to address this issue.