https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:07:27.143660+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349119 EUVD-2026-349119 2026-10-06T08:07:27.209442+00:00 EUVD-2026-349119 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66733 fkie_cve-2026-66733 2026-10-06T08:07:27.209537+00:00

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The mUniquePacketID field is read directly from the UDP wire-format packet header without bounds checking, causing the server to allocate one CacheItem per missing packet ID gap, exhausting available host memory and propagating an uncaught std::bad_alloc exception to std::terminate().

 https://cve.radiocsirt.org/vuln/ghsa-947v-gcqq-82hv GHSA-947v-gcqq-82hv 2026-10-06T08:07:27.209588+00:00

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The mUniquePacketID field is read directly from the UDP wire-format packet header without bounds checking, causing the server to allocate one CacheItem per missing packet ID gap, exhausting available host memory and propagating an uncaught std::bad_alloc exception to std::terminate().