A heap buffer overflow vulnerability exists in the GNU C Library (eglibc) version 2.45 or earlier when an effectively empty string is passed to the ,ccs= syntax extension of the mode argument in the fopen function. This flaw arises if the mode string input is attacker-controlled. This usage pattern is uncommon in typical GNU/Linux applications, and user-supplied ccs values should be validated before use.
CVE-2026-47891 is a critical vulnerability in Spring WebFlux applications using the Aalto XML processor. The flaw causes the maxInMemorySize limit to be improperly enforced during XML parsing, potentially allowing excessive memory consumption. Affected Spring Framework versions include 5.2.25.RELEASE and earlier through 7.0.8. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
Spring MVC and WebFlux applications using Server-Sent Events (SSE) with view fragments are vulnerable to stream corruption. This affects Spring Framework versions 7.0.0 through 7.0.8 and 6.2.0 through 6.2.19. The vulnerability has a critical severity with a CVSS score of 9.8.
A security vulnerability in the Ruby programming language's resolv gem allows denial of service via uncontrolled memory growth from crafted DNS responses. This issue affects Ruby 3.3 as used in Red Hat Enterprise Linux 8. A security update has been issued by Red Hat to address this vulnerability.
A denial-of-service vulnerability exists in the GNU C Library (glibc) affecting the conversion of EUC_JISX0213 encoded input to UCS-4 or internal wide character encoding. The flaw causes the conversion process to hang indefinitely when handling certain crafted input sequences, leading to a process hang. This issue requires attacker-controlled input on a rare charset path and an application that retries conversion with a small output buffer. The impact is limited to availability due to process hang. Mitigations include avoiding conversion of untrusted data with this charset or restricting access and applying resource limits.
libjpeg-turbo version 3.2.0 contains an integer division-by-zero vulnerability in its PNG loader. This flaw occurs when processing a valid indexed-color PNG image with a non-gray palette using specific functions, potentially causing a division-by-zero error that leads to a crash (SIGFPE) and denial of service.
Multiple security vulnerabilities have been identified in the GNU C Library (glibc), a core component of Linux and other Unix-like operating systems. These include buffer overflows, out-of-bounds stack array accesses, stack overflows, and hangs in character set converters. The issues could potentially allow attackers to cause denial of service or execute arbitrary code. Fixes have been released by vendors such as Red Hat and Ubuntu, with updated package versions available for affected distributions.
Multiple security vulnerabilities have been identified and fixed in OpenSSL, affecting various Ubuntu LTS releases. These issues include improper handling of QUIC protocol packets, signature algorithm selection, TLS handshake buffering, session cache management, CMS key unwrapping, and authentication tag verification. The vulnerabilities could allow remote attackers to cause denial of service through crashes or resource exhaustion, and in one case, potentially enable arbitrary code execution or AEAD forgery attacks. Fixes are available through updated OpenSSL packages for affected Ubuntu versions.
This entry references multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the vulnerabilities, affected versions, or impacts are provided.
DBD::Pg version 3.21.0 for Perl contains a heap out-of-bounds write vulnerability in the quote_float function. This occurs because quote_float allocates insufficient memory for certain special literals such as NaN, Inf, and Infinity, causing a buffer overflow by 2 bytes. The flaw was introduced in version 3.21.0 during a rewrite of quote.c and can be triggered via the $dbh->quote method. The vulnerability has a critical severity with a CVSS score of 9.8.
A use-after-free (UAF) vulnerability in the ALSA USB MIDI2 endpoint handling in the Linux kernel was fixed. The issue arose from a delayed release of MIDI2 endpoints causing dereferencing of already freed objects. This vulnerability affects specific Linux kernel versions and has a medium severity rating with a CVSS score of 5.4.
The Rust arrayref crate version 0.3.10 contains a rogue dependency that can trigger execution of malicious code during project compilation. This vulnerability allows arbitrary code execution due to the dependency registering with a command-and-control server. It affects specific versions of the crate and has a critical severity rating.
Multiple high and moderate impact security vulnerabilities have been fixed in Mozilla Firefox, Firefox ESR, and Thunderbird. These include issues such as sandbox escapes, site isolation failures, privilege escalations, use-after-free bugs, information disclosures, mitigation bypasses, and same-origin policy bypasses across various components like Graphics, DOM, JavaScript engine, Networking, and others. The fixes are included in Firefox 154 and Firefox ESR 115.39 releases.
A vulnerability in the Linux kernel's dma-fence subsystem could cause null pointer dereferences in certain tracepoints related to fence operations. This issue has been fixed by adjusting the tracepoint handling to safely access fence operation pointers and by introducing a new tracepoint class to avoid dereferencing null pointers after fence signaling.
A high-severity vulnerability in the Linux kernel's hfsplus filesystem implementation allows a null pointer dereference when the attributes file is not loaded during system mount and setxattr is executed in userspace. The issue arises from a duplicate inode dirty marking action, which has been removed to resolve the flaw.
A use-after-free vulnerability in the Linux kernel's liveupdate component was fixed by reordering module reference counting calls to ensure the file handler module remains pinned during critical operations. The flaw involved improper ordering of module_put() and xa_erase() calls in luo_file_unpreserve_files() and luo_file_finish(), which could lead to accessing freed memory.
CVE-2026-74357 is a high-severity vulnerability in the Linux kernel's AMDGPU driver. It involves a race condition in the amdgpu_coredump ring dump function where concurrent updates to fence signalling cause an out-of-bounds write in kernel memory. This flaw can lead to memory corruption during GPU reset operations triggered by specific test workloads. The issue was fixed by adding a boundary check to prevent writing beyond allocated buffers.
CVE-2026-74343 is a race condition vulnerability in the Linux kernel's kernfs subsystem affecting extended attribute (xattr) operations when multiple superblocks share the same kernfs_node. This flaw allows concurrent xattr modifications without proper serialization, potentially leading to data corruption or privilege escalation. The issue is fixed by introducing a hashed mutex array to serialize access to shared kernfs_node xattr data.
A resource leak vulnerability was identified and fixed in the Linux kernel's mt76 wifi driver for the mt7921 device. The flaw occurred when certain functions failed during device probing, causing allocated resources not to be properly released. This issue affects specific versions of the linux-hwe-edge kernel. The vulnerability has a low severity score and does not have known exploits in the wild.
A deadlock vulnerability in the BTRFS zoned filesystem implementation of the Linux kernel was fixed. The deadlock occurred during data relocation when waiting for a space reservation ticket that could never be fulfilled because the relocation itself was responsible for freeing the space. The fix introduces a new flush state to avoid re-entering the relocation code and breaking the deadlock cycle.