https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:47:01.249223+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2015-5380 Withdrawn: BELL-CVE-2015-5380 — CVE-2015-5380 does not affect BellSoft software 2026-10-02T22:47:01.292334+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2015-04386 cnvd-2015-04386 2026-10-02T22:47:01.292375+00:00 cnvd-2015-04386 https://cve.radiocsirt.org/vuln/euvd-2026-93437 EUVD-2026-93437 2026-10-02T22:47:01.292392+00:00 EUVD-2026-93437 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5380 fkie_cve-2015-5380 2026-10-02T22:47:01.292403+00:00

The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence.

 https://cve.radiocsirt.org/vuln/ghsa-cpgp-qq89-2x6x GHSA-cpgp-qq89-2x6x 2026-10-02T22:47:01.292433+00:00

The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence.

 https://cve.radiocsirt.org/vuln/gsd-2015-5380 gsd-2015-5380 2026-10-02T22:47:01.292450+00:00 gsd-2015-5380 https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 SUSE-SU-2019:14246-1 — Security update for Mozilla Firefox 2026-10-02T22:47:01.292460+00:00

Security update for Mozilla Firefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5380 Withdrawn: UBUNTU-CVE-2015-5380 2026-10-02T22:47:01.292550+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: nodejs, Ubuntu:18.04:LTS: nodejs

The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence.