Capstone versions prior to 6.0.0-Alpha9 have a vulnerability in the cs_insn_name() API where invalid instruction IDs can cause out-of-bounds reads in the M68K and RISCV backends. This can lead to process crashes and availability loss. The issue is patched in version 6.0.0-Alpha9. No code execution or data disclosure has been demonstrated.
A vulnerability in QEMU's virtio component involves improper validation of queue size against the allocated maximum. This flaw could potentially lead to unexpected behavior in the virtio device emulation. The issue affects specific Ubuntu package versions of QEMU. No CVSS score is provided, but the severity is assessed as medium based on the available information.
CVE-2026-63318 is a vulnerability in QEMU's 9pfs implementation where a mismatch in the 9P2000.u flag allows bypassing readonly restrictions on O_TRUNC and O_APPEND file operations. This flaw affects specific Ubuntu package versions of QEMU. The severity is medium, and no CVSS score is provided.
An out-of-bounds (OOB) access vulnerability exists in the virtio-gpu blob resource creation component of QEMU. This vulnerability affects multiple specific Ubuntu package versions of QEMU. The issue could potentially lead to memory corruption or other unintended behavior during GPU resource handling. The severity is assessed as medium. No CVSS score or detailed vendor advisory is provided, and no known exploits are reported in the wild.
Webpack versions from 5.49.0 up to but not including 5.104.0 have a vulnerability in the HttpUriPlugin when experiments.buildHttp is enabled. The plugin enforces allowedUris only on the initial URL but fails to re-validate after HTTP redirects, allowing bypass of the allow-list. This can lead to build-time SSRF and inclusion of untrusted content in build outputs. The issue is fixed in version 5.104.0.
Webpack versions from 5.49.0 up to but not including 5.104.1 have a vulnerability in the HTTP(S) resolver when experiments.buildHttp is enabled. This flaw allows bypassing the allowedUris allow-list by using URLs with userinfo (username:password@host), leading to build-time SSRF and untrusted content inclusion. The issue is patched in version 5.104.1.
An out-of-bounds read vulnerability exists in rsync versions before 3.5.0 in the sender-side block matching logic. A malicious receiver can send a specially crafted checksum block with zero length, causing a negative offset calculation and resulting in memory access before the start of an allocated buffer on the sender side. This vulnerability has a CVSS score of 6.5 and is classified as medium severity.
A path confinement bypass vulnerability exists in rsync versions before 3.5.0. This flaw allows remote clients to escape the intended inner-module root confinement by exploiting improper handling of the /./ boundary marker in module paths. Attackers can construct paths or forge delta-basis transfers that resolve outside the chroot boundary, potentially gaining unauthorized read or write access to files outside the designated module subtree. The vulnerability has a CVSS 3.1 score of 7.4, indicating a medium severity level.
A logic error in rsync versions before 3.5.0 in the handling of the --max-alloc option allows a sender or configuration to disable allocation sanity checks by setting --max-alloc=0. This flaw can cause the receiver to attempt unbounded memory allocations for file lists and data structures, potentially leading to denial of service due to memory exhaustion. The vulnerability has a medium severity with a CVSS score of 5.3. Multiple specific versions of rsync are affected, primarily older Ubuntu package versions. No known exploits in the wild have been reported.
rsync versions before 3.5.0 contain an arbitrary file write vulnerability that allows attackers to write files outside the intended destination directory by specifying absolute paths via the --temp-dir or --link-dest options. This occurs because the rename-confinement logic is bypassed when these options resolve to paths outside the destination tree, enabling attacker-controlled paths to write files to arbitrary locations accessible by the rsync process. The vulnerability has a CVSS score of 8.1, indicating a high severity impact on integrity and availability, but no confidentiality impact. Multiple specific rsync versions, including various Ubuntu package versions, are affected.
A time-of-check to time-of-use (TOCTOU) race condition vulnerability exists in rsync versions before 3.5.0 in the non-daemon receiver's destination directory handling. This flaw allows an attacker who can manipulate the destination path's parent components to redirect file writes to unintended filesystem locations by substituting a symlink between path resolution and directory change operations. The vulnerability has a CVSS score of 6.3, indicating medium severity.
rsync versions before 3.5.0 contain a symlink race condition vulnerability in the sender's source tree traversal. This flaw allows an attacker who can manipulate a parent directory of the source tree to redirect file reads to unintended paths by atomically replacing a directory component with a symlink pointing outside the source root. This can lead to disclosure of file contents outside the intended transfer root. The vulnerability has a CVSS score of 4.7, indicating medium severity.
CVE-2026-73141 is a medium severity vulnerability in Svxlink affecting multiple specific versions. It involves stack exhaustion caused by variable-length arrays (VLA) in audio decoders. No CVSS score or detailed technical data is provided. There is no information on available patches or exploits in the wild.
CVE-2026-73142 is a medium severity vulnerability in Svxlink affecting multiple specific versions. It involves a connection object leak in the remotetrx NetUplink component that can lead to a denial of service (DoS). No CVSS score or detailed technical data is provided. There is no indication of known exploits in the wild or vendor patch information.
A vulnerability in Svxlink's RtlTcp component causes the daemon to exit when it receives a malformed greeting. This issue affects multiple specific versions of Svxlink. The severity is assessed as medium. No CVSS score or detailed technical impact is provided. There is no information about available patches or exploits in the wild.
CVE-2026-73144 is a vulnerability in the FRN module of Svxlink that causes unbounded memory growth. This issue affects multiple specific versions of Svxlink. The severity is assessed as medium. There is no CVSS score or detailed vendor advisory information available regarding patches or mitigations.
Svxlink contains a vulnerability identified as CVE-2026-73145 involving its HTTP server, which allows unbounded request accumulation. This issue affects multiple specific versions of Svxlink. The vulnerability has been assigned a medium severity level. No CVSS score or detailed technical impact information is provided. There is no indication of known exploits in the wild or available patches at this time.
CVE-2026-73146 is a use-after-free vulnerability in the svxreflector component of svxlink. It occurs due to reentrant client deletion, which can lead to memory corruption. Multiple specific versions of svxlink are affected. The severity is assessed as medium. No CVSS score or vendor patch information is currently available.
CVE-2026-73147 is a TCL command injection vulnerability in the reflector client component of Svxlink. Multiple specific versions of Svxlink are affected. The vulnerability allows injection of TCL commands, which could lead to unauthorized command execution. The severity is assessed as medium. No CVSS score or vendor patch information is provided, and no known exploits are reported in the wild.
A use-after-free vulnerability exists in svxreflector component of Svxlink, caused by a dangling JSON reference that allows write operations after memory has been freed. This issue affects multiple specific versions of Svxlink. The vulnerability is rated medium severity. No CVSS score or vendor patch information is provided.