Threats Tagged 'cwe-248'

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0.

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.NodeMetadata.ForbiddenAnnotations.Regex were not validated by the configuration admission webhook, allowing a Cluster Admin to store a malformed regex that later reached regexp.MustCompile in pkg/api/forbidden_list.go through internal/webhook/node/user_metadata.go and crashed the node admission webhook on Node create, update, or patch requests. This issue is fixed in version 0.13.8.

find-my-way versions prior to 9.0.7 contain an improper input validation vulnerability that allows a remote denial of service (DoS) when used with Node's HTTP/2 server. The issue arises because HTTP/2 method values like constructor, toString, or __proto__ can access inherited object properties in the router's internal trees object, causing the application to crash.

CVE-2026-48069 is a high-severity vulnerability in the grpc-node library (@grpc/grpc-js) where an invalid incoming compressed message can cause a client or server process to crash due to an uncaught exception. This affects multiple versions prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4. The issue is fixed in these specified versions.

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming HTTP/2 stream initiation can cause a server process created using @grpc/grpc-js to crash. This issue is fixed in versions 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4.

NVIDIA Triton Inference Server for Linux has a vulnerability identified as CVE-2026-47480, where an attacker can trigger an uncaught exception. This vulnerability can lead to a denial of service condition. The issue is classified under CWE-248 (Uncaught Exception). The CVSS v3.1 base score is 7.5, indicating high severity. No patch or official remediation has been disclosed yet. There are no known exploits in the wild at this time.

A vulnerability in the hapijs joi JavaScript schema validator allows denial of service via unhandled exceptions when validating deeply nested recursive schemas. Versions prior to 17.13.4 and 18.2.1 can crash if validate() is called without try/catch on such input. This causes a RangeError that can terminate the process. The issue is fixed in versions 17.13.4 and 18.2.1.

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validated against the real file size. A crafted bundle can cause an attacker-chosen allocation inside Extract, where std::bad_alloc or std::length_error can escape across the COM STDMETHODCALLTYPE boundary and crash the process. This issue is fixed in version 6.5.1749.0.

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an XLSX file containing a shared-string cell with -1 to trigger sharedStrings[-1] and panic when read through GetCellValue or GetRows. This issue is fixed in version 2.11.0.