https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:43:31 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-8829 <p><strong>Affected:</strong> Alpaquita:23: perl-html-parser, Alpaquita:25: perl-html-parser, Alpaquita:stream: perl-html-parser</p> <p><strong>Affected:</strong> Alpaquita:23: perl-html-parser, Alpaquita:25: perl-html-parser, Alpaquita:stream: perl-html-parser</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-8829 https://cve.radiocsirt.org/vuln/brew-extract_url-cve-2026-8829 <p><strong>Affected:</strong> Homebrew: extract_url</p> <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.</p> <p>The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&#39;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.</p> <p>The read may disclose adjacent heap contents into the destination SV.</p> <p><strong>Affected:</strong> Homebrew: extract_url</p> <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.</p> <p>The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&#39;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.</p> <p>The read may disclose adjacent heap contents into the destination SV.</p> https://cve.radiocsirt.org/vuln/brew-extract_url-cve-2026-8829 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0737 certfr-2026-avi-0737 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0737 https://cve.radiocsirt.org/vuln/euvd-2026-330909 EUVD-2026-330909 https://cve.radiocsirt.org/vuln/euvd-2026-330909 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8829 <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.</p> <p>The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&#39;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.</p> <p>The read may disclose adjacent heap contents into the destination SV.</p> <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.</p> <p>The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&#39;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.</p> <p>The read may disclose adjacent heap contents into the destination SV.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8829 https://cve.radiocsirt.org/vuln/ghsa-9p7j-9995-m88w <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.</p> <p>The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&#39;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.</p> <p>The read may disclose adjacent heap contents into the destination SV.</p> <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.</p> <p>The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&#39;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.</p> <p>The read may disclose adjacent heap contents into the destination SV.</p> https://cve.radiocsirt.org/vuln/ghsa-9p7j-9995-m88w https://cve.radiocsirt.org/vuln/msrc_cve-2026-8829 msrc_CVE-2026-8829 https://cve.radiocsirt.org/vuln/msrc_cve-2026-8829 https://cve.radiocsirt.org/vuln/ncsc-2026-0321 NCSC-2026-0321 https://cve.radiocsirt.org/vuln/ncsc-2026-0321 https://cve.radiocsirt.org/vuln/oesa-2026-2672 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: perl-HTML-Parser, openEuler:24.03-LTS-SP3: perl-HTML-Parser, openEuler:20.03-LTS-SP4: perl-HTML-Parser, openEuler:22.03-LTS-SP4: perl-HTML-Parser</p> <p>Objects of the HTML::Parser class will recognize markup and separate it from plain text (alias data content) in HTML documents. As different kinds of markup and text are recognized, the corresponding event handlers are invoked. Security Fix(es):</p> <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.</p> <p>The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&amp;apos;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.</p> <p>The read may disclose adjacent heap contents into the destination SV.(CVE-2026-8829)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: perl-HTML-Parser, openEuler:24.03-LTS-SP3: perl-HTML-Parser, openEuler:20.03-LTS-SP4: perl-HTML-Parser, openEuler:22.03-LTS-SP4: perl-HTML-Parser</p> <p>Objects of the HTML::Parser class will recognize markup and separate it from plain text (alias data content) in HTML documents. As different kinds of markup and text are recognized, the corresponding event handlers are invoked. Security Fix(es):</p> <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.</p> <p>The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&amp;apos;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation.</p> <p>The read may disclose adjacent heap contents into the destination SV.(CVE-2026-8829)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2672 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10957-1 <p>perl-HTML-Parser-3.850.0-1.1 on GA media</p> <p>perl-HTML-Parser-3.850.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10957-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22189-1 <p>Security update for perl-HTML-Parser</p> <p>Security update for perl-HTML-Parser</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22189-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8829 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libhtml-parser-perl, Ubuntu:16.04:LTS: libhtml-parser-perl, Ubuntu:18.04:LTS: libhtml-parser-perl, Ubuntu:20.04:LTS: libhtml-parser-perl, Ubuntu:22.04:LTS: libhtml-parser-perl, Ubuntu:24.04:LTS: libhtml-parser-perl, Ubuntu:25.10: libhtml-parser-perl, Ubuntu:26.04:LTS: libhtml-parser-perl</p> <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&#39;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation. The read may disclose adjacent heap contents into the destination SV.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libhtml-parser-perl, Ubuntu:16.04:LTS: libhtml-parser-perl, Ubuntu:18.04:LTS: libhtml-parser-perl, Ubuntu:20.04:LTS: libhtml-parser-perl, Ubuntu:22.04:LTS: libhtml-parser-perl, Ubuntu:24.04:LTS: libhtml-parser-perl, Ubuntu:25.10: libhtml-parser-perl, Ubuntu:26.04:LTS: libhtml-parser-perl</p> <p>HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and that value contained its own key as an entity reference, a later call to grow_gap() reallocated the SV&#39;s PV buffer and freed the backing allocation that repl still pointed into. The subsequent copy loop read repl_len bytes from the freed allocation. The read may disclose adjacent heap contents into the destination SV.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8829 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2858 <p>Ein Angreifer kann mehrere Schwachstellen in IBM AIX und IBM VIOS ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM AIX und IBM VIOS ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2858