FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways to hang clients by sending incomplete chunked re...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD

历史摘要 · 未重新核验 · NVD

FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD

历史摘要 · 未重新核验 · OSV.dev

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) ...

CVE-2026-109832

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable

历史摘要 · 未重新核验 · NVD

music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd...

CVE-2026-107391

music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after

历史摘要 · 未重新核验 · NVD

music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master

CVE-2026-107391

### Summary `StsdAtom.get()` in `lib/mp4/AtomToken.ts` parses an MP4 `stsd` (sample description) box's entry table by a

历史摘要 · 未重新核验 · GitHub Advisory

RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS

CVE-2026-106121

## Summary `com.rabbitmq.tools.json.JSONReader.read()` never returns when its input ends inside a quoted string or a `/

历史摘要 · 未重新核验 · GitHub Advisory

When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that repo...

CVE-2026-104633

When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API se

历史摘要 · 未重新核验 · NVD

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read(...

CVE-2026-106121

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

历史摘要 · 未重新核验 · NVD

A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles used for open connect...

CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's availab

历史摘要 · 未重新核验 · NVD

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. When fewer t...

CVE-2026-106116

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry

历史摘要 · 未重新核验 · NVD

@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary

CVE-2026-19484

### Impact Versions of `@fastify/busboy` from 3.1.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The vendo

历史摘要 · 未重新核验 · GitHub Advisory

figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width

CVE-2026-96780

### Impact A denial-of-service (infinite loop) can occur in `text()` / `textSync()` when **both**: - `whitespaceBreak: t

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution

### Affected file * `dulwich/pack.py` (Method: `Pack.resolve_object`) ### Description / Summary A High-severity Denial

历史摘要 · 未重新核验 · GitHub Advisory

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommend...

CVE-2026-94654

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue aff

历史摘要 · 未重新核验 · NVD

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommend...

CVE-2026-85476

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue aff

历史摘要 · 未重新核验 · NVD

Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulnerability in Apache Thrift D language bindings. This is...

CVE-2026-86537

Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulne

历史摘要 · 未重新核验 · NVD

Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift ...

CVE-2026-86535

Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attribute

历史摘要 · 未重新核验 · NVD

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users ...

CVE-2026-93925

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. T

历史摘要 · 未重新核验 · NVD

Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who ...

CVE-2026-63575

Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy C

历史摘要 · 未重新核验 · NVD

Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PK...

CVE-2026-63570

Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp be

历史摘要 · 未重新核验 · NVD