Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request
CVE-2026-108105
Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows r
#cwe-617
共收录 216 条相关情报。
← 返回所有主题vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core
CVE-2026-105753
## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
CVE-2026-105754
## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint in the disaggregated scale-out path accepts caller-suppli...
CVE-2026-105754
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint
vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU cache can commit a media hash in the frontend sender cach...
CVE-2026-105753
vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU
In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attribute with an empty value. The text parser passes the empty...
CVE-2026-19395
In Qt for MCUs, a Text element that displays styled text halts the device if an tag in the text contains an attribute w
In Modem, there is a possible system crash due to improper input validation. This could lead to...
CVE-2026-20525
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlle...
CVE-2026-20525
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service
ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedreceivers RPC handler, which calls expect() on Sapling rec...
CVE-2026-104434
ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedr
The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for a side-chain block because the block's -1 confirmations ...
CVE-2026-104428
The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for
Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC
CVE-2026-104434
ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedr
Zebra before 11.0.0 Denial of Service via getblock Verbosity 2
CVE-2026-104428
The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in...
CVE-2026-103104
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementati
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation...
CVE-2026-103108
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementat
Pexip Infinity before 40.1 is affected by improper input validation in the signaling...
CVE-2026-103100
Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malici
Pexip Infinity before 41.1 is affected by improper input validation in the media implementation...
CVE-2026-103099
Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote att
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software a...
CVE-2026-103108
CVE-2026-103108 是一枚影响 Pexip Infinity 视频会议/协作平台的拒绝服务类漏洞。根据 NVD 元数据，Pexip Infinity 在 38.2 之前的版本，以及 39.0、39.1、40.0 三个具体版本均受
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software a...
CVE-2026-103104
NVD 披露了 CVE-2026-103104，影响 Pexip Infinity 视频会议与协作平台。该产品通常以自托管方式部署在企业网内，承担会议桥接、互操作网关与音视频媒体处理等职责，其媒体实现负责接收、解析并转发音视频流。根据公告，
Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a d...
CVE-2026-103100
根据 NVD 收录的元数据，Pexip Infinity 40.1 之前的版本存在一处输入校验不当（improper input validation）缺陷，问题位于其信令（signaling）实现中。Pexip Infinity 是用于企
Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial o...
CVE-2026-103099
本条目来自 NVD，描述 Pexip Infinity 41.1 之前版本中存在的一个输入验证类缺陷，位于产品的媒体（media）实现部分。Pexip Infinity 是面向企业的视频会议与实时协作平台，其媒体处理模块负责音视频流的接收、