https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:17:08 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0674 certfr-2026-avi-0674 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0674 https://cve.radiocsirt.org/vuln/euvd-2026-321490 EUVD-2026-321490 https://cve.radiocsirt.org/vuln/euvd-2026-321490 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41401 <p>libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.</p> <p>libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41401 https://cve.radiocsirt.org/vuln/ghsa-v7jp-vmx6-5429 <p>libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.</p> <p>libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-v7jp-vmx6-5429 https://cve.radiocsirt.org/vuln/msrc_cve-2026-41401 msrc_CVE-2026-41401 https://cve.radiocsirt.org/vuln/msrc_cve-2026-41401 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10868-1 <p>libyang-devel-3.13.6-2.1 on GA media</p> <p>libyang-devel-3.13.6-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10868-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22200-1 <p>Security update for libyang</p> <p>Security update for libyang</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22200-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41401 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libyang, Ubuntu:22.04:LTS: libyang, Ubuntu:25.10: libyang, Ubuntu:26.04:LTS: libyang</p> <p>libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libyang, Ubuntu:22.04:LTS: libyang, Ubuntu:25.10: libyang, Ubuntu:26.04:LTS: libyang</p> <p>libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41401