Month: August 2026

Information published. Continue reading CVE-2026-54332 GoPacket’s sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS→

Information published. Continue reading CVE-2026-68399 bpf: Fix UAF in sock clone early bailouts→

Information published. Continue reading CVE-2026-71556 go-git: Worktree operations may follow symlinks→

Information published. Continue reading CVE-2026-68323 tipc: serialize udp bearer replicast list updates→

Information published. Continue reading CVE-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit→

Information published. Continue reading CVE-2026-68210 media: stm32: dcmi: unregister notifier on probe failure→

Information published. Continue reading CVE-2026-55969 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()→

Information published. Continue reading CVE-2026-68407 wifi: nl80211: free RNR data on MBSSID mismatch→