https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:03:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380458 EUVD-2026-380458 https://cve.radiocsirt.org/vuln/euvd-2026-380458 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77220 <p>PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can trigger stack memory reuse across requests, causing cross-tenant document content corruption by silently overwriting one caller&#39;s dictionary string values with another caller&#39;s data.</p> <p>PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can trigger stack memory reuse across requests, causing cross-tenant document content corruption by silently overwriting one caller&#39;s dictionary string values with another caller&#39;s data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-77220 https://cve.radiocsirt.org/vuln/ghsa-2fr4-jfvm-chmp <p>PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can trigger stack memory reuse across requests, causing cross-tenant document content corruption by silently overwriting one caller&#39;s dictionary string values with another caller&#39;s data.</p> <p>PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can trigger stack memory reuse across requests, causing cross-tenant document content corruption by silently overwriting one caller&#39;s dictionary string values with another caller&#39;s data.</p> https://cve.radiocsirt.org/vuln/ghsa-2fr4-jfvm-chmp https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-77220 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: ippsample, Ubuntu:20.04:LTS: ippsample, Ubuntu:22.04:LTS: ippsample, Ubuntu:24.04:LTS: ippsample, Ubuntu:26.04:LTS: ippsample</p> <p>PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can trigger stack memory reuse across requests, causing cross-tenant document content corruption by silently overwriting one caller&#39;s dictionary string values with another caller&#39;s data.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: ippsample, Ubuntu:20.04:LTS: ippsample, Ubuntu:22.04:LTS: ippsample, Ubuntu:24.04:LTS: ippsample, Ubuntu:26.04:LTS: ippsample</p> <p>PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can trigger stack memory reuse across requests, causing cross-tenant document content corruption by silently overwriting one caller&#39;s dictionary string values with another caller&#39;s data.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-77220