https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:00:42.811544+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366133 EUVD-2026-366133 2026-10-06T17:00:42.898196+00:00 EUVD-2026-366133 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87962 fkie_cve-2026-87962 2026-10-06T17:00:42.898231+00:00

t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.

 https://cve.radiocsirt.org/vuln/ghsa-p7mw-7cfx-cr67 GHSA-p7mw-7cfx-cr67 2026-10-06T17:00:42.898262+00:00

t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87962 UBUNTU-CVE-2026-87962 2026-10-06T17:00:42.898279+00:00

Affected: Ubuntu:16.04:LTS: t-digest, Ubuntu:18.04:LTS: t-digest, Ubuntu:20.04:LTS: t-digest, Ubuntu:22.04:LTS: t-digest, Ubuntu:24.04:LTS: t-digest, Ubuntu:26.04:LTS: t-digest

t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.