Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length
CVE-2026-94633
Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length
2026-10-08 归档
今日共收录 832 条安全情报，包含 0 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize
CVE-2026-66331
Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize
ALSA: core: Fix potential UAF after asynchronous card release
CVE-2026-98266
ALSA: core: Fix potential UAF after asynchronous card release
Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service
CVE-2026-90440
Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthen
wifi: cfg80211: ibss: ref BSS entry for joined event
CVE-2026-98338
wifi: cfg80211: ibss: ref BSS entry for joined event
Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard
CVE-2026-96289
Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard
wifi: mac80211: only operate on TDLS peers in the TDLS code
CVE-2026-98332
wifi: mac80211: only operate on TDLS peers in the TDLS code
Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize`
CVE-2026-94638
Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize`
dmaengine: Fix device kref underflow in dma_chan_put()
CVE-2026-98344
dmaengine: Fix device kref underflow in dma_chan_put()
Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)
CVE-2026-94653
Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)
wifi: mac80211: mesh: reset the CSA state when leaving
CVE-2026-98327
wifi: mac80211: mesh: reset the CSA state when leaving
Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service
CVE-2026-86537
Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to den
mmc: mxcmmc: cancel data work and watchdog on remove
CVE-2026-98210
mmc: mxcmmc: cancel data work and watchdog on remove
Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages
CVE-2026-66081
Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages
btrfs: handle lack of space when cleaning up verity items
CVE-2026-98279
btrfs: handle lack of space when cleaning up verity items
Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)
CVE-2026-61373 · CVE-2026-94639
Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection
mmc: sdio_uart: fix xmit_fifo leak when the port table is full
CVE-2026-98208
mmc: sdio_uart: fix xmit_fifo leak when the port table is full
Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match
CVE-2026-85088
Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries
af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().
CVE-2026-98289
af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().
Apache Thrift: c_glib `read_all` spins when the underlying read returns 0
CVE-2026-85476
Apache Thrift: c_glib `read_all` spins when the underlying read returns 0