https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:49:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-00376 bdu:2026-00376 https://cve.radiocsirt.org/vuln/bdu:2026-00376 https://cve.radiocsirt.org/vuln/bell-cve-2026-22184 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2026-22184 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/cleanstart-2026-ep51501 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cassandra-reaper-fips</p> <p>Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cassandra-reaper-fips</p> <p>Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ep51501 https://cve.radiocsirt.org/vuln/euvd-2026-362262 EUVD-2026-362262 https://cve.radiocsirt.org/vuln/euvd-2026-362262 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22184 <p>zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.</p> <p>zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22184 https://cve.radiocsirt.org/vuln/ghsa-7687-3v4j-49fr <p>zlib versions up to and including 1.3.1.2 contain a global buffer overflow in the untgz utility. The TGZfname() function copies an attacker-supplied archive name from argv[] into a fixed-size 1024-byte static global buffer using an unbounded strcpy() call without length validation. Supplying an archive name longer than 1024 bytes results in an out-of-bounds write that can lead to memory corruption, denial of service, and potentially code execution depending on compiler, build flags, architecture, and memory layout. The overflow occurs prior to any archive parsing or validation.</p> <p>zlib versions up to and including 1.3.1.2 contain a global buffer overflow in the untgz utility. The TGZfname() function copies an attacker-supplied archive name from argv[] into a fixed-size 1024-byte static global buffer using an unbounded strcpy() call without length validation. Supplying an archive name longer than 1024 bytes results in an out-of-bounds write that can lead to memory corruption, denial of service, and potentially code execution depending on compiler, build flags, architecture, and memory layout. The overflow occurs prior to any archive parsing or validation.</p> https://cve.radiocsirt.org/vuln/ghsa-7687-3v4j-49fr https://cve.radiocsirt.org/vuln/icsa-26-202-06 <p>CADRA is affected by multiple zlib and Foxit vulnerabilities.</p> <p>Siemens has released a new version for CADRA and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>CADRA is affected by multiple zlib and Foxit vulnerabilities.</p> <p>Siemens has released a new version for CADRA and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> https://cve.radiocsirt.org/vuln/icsa-26-202-06 https://cve.radiocsirt.org/vuln/msrc_cve-2026-22184 msrc_CVE-2026-22184 https://cve.radiocsirt.org/vuln/msrc_cve-2026-22184 https://cve.radiocsirt.org/vuln/ncsc-2026-0229 NCSC-2026-0229 https://cve.radiocsirt.org/vuln/ncsc-2026-0229 https://cve.radiocsirt.org/vuln/oesa-2026-3759 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: openjdk-21</p> <p>The OpenJDK runtime environment. Security Fix(es):</p> <p>Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)</p> <p>Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.(CVE-2025-28164)</p> <p>Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability doe…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: openjdk-21</p> <p>The OpenJDK runtime environment. Security Fix(es):</p> <p>Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)</p> <p>Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.(CVE-2025-28164)</p> <p>Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability doe…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3759 https://cve.radiocsirt.org/vuln/ssa-470355 <p>CADRA is affected by multiple zlib and Foxit vulnerabilities.</p> <p>Siemens has released a new version for CADRA and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>CADRA is affected by multiple zlib and Foxit vulnerabilities.</p> <p>Siemens has released a new version for CADRA and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> https://cve.radiocsirt.org/vuln/ssa-470355 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-22184 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: zsync, Ubuntu:18.04:LTS: zsync, Ubuntu:20.04:LTS: zsync, Ubuntu:22.04:LTS: zsync, Ubuntu:24.04:LTS: zsync, Ubuntu:25.10: zsync, Ubuntu:26.04:LTS: zsync</p> <p>zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: zsync, Ubuntu:18.04:LTS: zsync, Ubuntu:20.04:LTS: zsync, Ubuntu:22.04:LTS: zsync, Ubuntu:24.04:LTS: zsync, Ubuntu:25.10: zsync, Ubuntu:26.04:LTS: zsync</p> <p>zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-22184 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0045 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in zlib im untgz utility ausnutzen, um einen Denial of Service Angriff durchzuführen, und potenziell um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in zlib im untgz utility ausnutzen, um einen Denial of Service Angriff durchzuführen, und potenziell um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0045