Month: February 2026

Information published. Continue reading CVE-2020-36478 An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.→

Information published. Continue reading CVE-2024-48875 btrfs: don’t take dev_replace rwsem on task already holding it→

Information published. Continue reading CVE-2024-49985 i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume→

Information published. Continue reading CVE-2025-22043 ksmbd: add bounds check for durable handle context→

Information published. Continue reading CVE-2024-41671 twisted.web has disordered HTTP pipeline response→

Information published. Continue reading CVE-2025-32023 Redis allows out of bounds writes in hyperloglog commands leading to RCE→

Information published. Continue reading CVE-2023-39323 Arbitrary code execution during build via line directives in cmd/go→

Information published. Continue reading CVE-2024-57257 A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.→