Threats Tagged 'cwe-805'

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-reads its in-memory buffer when constructed from a bytes object, which can disclose adjacent memory or cause service degradation via a potential segmentation fault when the `vsi_buffer` property is accessed. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Bence Nagy for reporting this issue.

CVE-2026-12087 is a critical out-of-bounds heap read vulnerability in the PEVANS Socket module for Perl. The flaw exists in the pack_ip_mreq_source() function, which improperly validates the length of its source argument, leading to reading beyond the buffer when the source is shorter than 4 bytes. This vulnerability can cause leakage of adjacent heap memory. No patch or official remediation has been confirmed yet.