A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some...
CVE-2026-18581
A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of th
#advisory
共收录 23627 条相关情报。
← 返回所有主题Quadratic-time escaping when stringifying X.500 distinguished names
CVE-2026-58059
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue a
HSS public-key level count unbounded, enabling huge allocation on verify
CVE-2026-58060
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This is
CCM-family modes write plaintext to caller buffer before tag check
CVE-2026-58061
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue al
Stapled OCSP response accepted without binding to the checked certificate
CVE-2026-58062
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This i
BCFKS keystore load honours unbounded KDF cost from untrusted file
CVE-2026-58063
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue al
mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
CVE-2026-18582
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Re
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.
CMS verifySignatures returns true for SignedData with zero signers
CVE-2026-59639
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue al
OpenPGP CFB quick-check oracle active on symmetric/session-key paths
CVE-2026-59640
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue
S/MIME validator trusts signer-asserted signingTime for path validation
CVE-2026-59641
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This iss
CMS AuthenticatedData content not bound to MAC when authAttrs present
CVE-2026-59642
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue
OpenPGP inline-signature policy failures silently ignored
CVE-2026-59643
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affect
MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
OER parser recurses without depth limit on self-referential IEEE 1609.2 schema
CVE-2026-59645
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. T
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
CVE-2026-59646
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This is
CRMF/CMP password-MAC honours unbounded iteration count
CVE-2026-59647
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects
OpenPGP Argon2 S2K honours attacker-chosen memory and passes
CVE-2026-59648
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also aff
OpenPGP user-attribute subpacket length bounded only by JVM max memory
CVE-2026-59649
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issu
MTI/A0 DH agreement exponentiates unvalidated peer value
CVE-2026-59650
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects