OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions
CVE-2026-110258
OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions
2026-10-18 归档
今日共收录 723 条安全情报，包含 0 个 CVE，397 篇安全通告，以及 78 篇研究论文。
← 返回归档列表OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter
CVE-2026-110270
OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter
OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute
CVE-2026-110257
OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute
OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader
CVE-2026-110263
OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader
OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter
CVE-2026-110262
OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter
OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers
CVE-2026-110260
OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers
OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES
CVE-2026-110261
OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES
OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer
CVE-2026-110591
OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer
Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)
CVE-2026-86562
Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)
Dpdk: dpdk: heap out-of-bounds read/write in gso header copy
CVE-2026-100236
Dpdk: dpdk: heap out-of-bounds read/write in gso header copy
Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap
CVE-2026-86567
Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap
Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
CVE-2026-86565
Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path
CVE-2026-110602
libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path
Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
CVE-2026-86847
Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions
CVE-2026-88838
Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions
Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service
CVE-2026-88833
Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service
libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL
CVE-2026-111137
libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL
libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string
CVE-2026-111269
libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
CVE-2026-104150
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip
CVE-2026-55453
CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip