Search Vulnerabilities

Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

CImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header

Libssh: libssh: denial of service via oversized sftp read length

SurrealDB before 2.2.2 Memory Exhaustion via string::replace

h2o is vulnerable to musl libc stack overflow

Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation

DoS vulnerability in the vibration service

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

h2o: musl libc stack overflow (QPACK)

NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields

Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiver

pypdf: Possible large memory usage for wrong image dimensions

Tanium addressed a denial of service vulnerability in Tanium Server.

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow GdImageFile decompression bomb protection bypass

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`