https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:07:32.575162+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2021-24032 Withdrawn: BELL-CVE-2021-24032 — CVE-2021-24032 does not affect BellSoft software 2026-10-04T04:07:32.763708+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-04T04:07:32.763758+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/cleanstart-2025-an69250 CLEANSTART-2025-AN69250 — Beginning in v1 2026-10-04T04:07:32.763778+00:00

Affected: CleanStart: zstd

Security vulnerability affects the zstd package. Beginning in v1.

 https://cve.radiocsirt.org/vuln/euvd-2026-23476 EUVD-2026-23476 2026-10-04T04:07:32.763809+00:00 EUVD-2026-23476 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24032 fkie_cve-2021-24032 2026-10-04T04:07:32.763823+00:00

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

 https://cve.radiocsirt.org/vuln/ghsa-ffqj-7pgc-cmj5 GHSA-ffqj-7pgc-cmj5 2026-10-04T04:07:32.763846+00:00

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

 https://cve.radiocsirt.org/vuln/gsd-2021-24032 gsd-2021-24032 2026-10-04T04:07:32.763862+00:00 gsd-2021-24032 https://cve.radiocsirt.org/vuln/msrc_cve-2021-24032 msrc_CVE-2021-24032 — Beginning in v1.4.1 and prior to v1.4.9 due to an incomplete fix for CVE-2021-24031 the Zstandard command-line utility… 2026-10-04T04:07:32.763872+00:00 msrc_CVE-2021-24032 https://cve.radiocsirt.org/vuln/oesa-2021-1094 OESA-2021-1094 — zstd security update 2026-10-04T04:07:32.763890+00:00

Affected: openEuler:20.03-LTS: zstd, openEuler:20.03-LTS-SP1: zstd

Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage, provided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels and has a better compression ratio. Security Fix(es): Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.(CVE-2021-24032)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0481-1 openSUSE-SU-2021:0481-1 — Security update for zstd 2026-10-04T04:07:32.763918+00:00

Security update for zstd

 https://cve.radiocsirt.org/vuln/rhsa-2024:3527 RHSA-2024:3527 — Red Hat Security Advisory: Red Hat AMQ Streams 2.7.0 release and security update 2026-10-04T04:07:32.763935+00:00

lz4: memory corruption due to an integer overflow bug caused by memmove argument zstd: Race condition allows attacker to access world-readable destination file protobuf-java: timeout in parser leads to DoS zstd: mysql: buffer overrun in util.c apache-commons-text: variable interpolation RCE Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) guava: insecure temporary directory creation bouncycastle: potential blind LDAP injection attack using a self-signed certificate bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact json-path: stack-based buffer overflow in Criteria.parse method io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support quarkus-core: Leak of local configuration properties into Quarkus applications commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file netty-codec-http: Allocation of Resources Without Limits or Throttling

 https://cve.radiocsirt.org/vuln/suse-su-2021:0948-1 SUSE-SU-2021:0948-1 — Security update for zstd 2026-10-04T04:07:32.763980+00:00

Security update for zstd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-24032 UBUNTU-CVE-2021-24032 2026-10-04T04:07:32.763997+00:00

Affected: Ubuntu:Pro:16.04:LTS: libzstd, Ubuntu:18.04:LTS: libzstd, Ubuntu:20.04:LTS: libzstd

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.