CWE-617
CVEs classified under CWE-617, newest first.
266 CVEsRSS
CVE-2026-116467Medium· 5.3ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion
A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable …
CVE-2026-115914Medium· 6.5vLLM DeepSeek-OCR image processing vulnerable to denial of service
vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal…
CVE-2026-81038High· 7.1Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses
The Object Transfer Service server builds its Object Action Control Point (OACP) response indication in oacp_ind_send() (subsys/bluetooth/services/ots/ots_oacp.c). Before this fix the four-byte Checksum Value field was appended whenever …
CVE-2026-98874Low· 2.3kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect (CVE-2026-98874)
A flaw was found in the Linux kernel's iwlwifi driver. A local user can trigger an unintended kernel warning by configuring Wake on Wireless LAN (WoWLAN) and suspending the system while disconnected from a network. On systems configured to…
CVE-2026-98872Medium· 4.4kernel: freevxfs: don't BUG() on unknown typed-extent type (CVE-2026-98872)
A flaw was found in the Linux kernel's FreeVxFS filesystem driver. When encountering an unrecognized extent type in an on-disk structure, the driver triggers a fatal kernel panic instead of handling the error cleanly. A local user can expl…
CVE-2026-76491High· 7.5Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening rel…
CVE-2026-102483High· 7.5Reachable Assertion in ntpsec
Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.
CVE-2026-97313High· 7.5Specific RPZ configurations and query patterns may result in an unexpected exit
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recur…
CVE-2026-56388NoneApache bRPC: Out-of-Bounds Write in Redis Command Parser
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk st…
CVE-2026-78048NoneApache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder
A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server process by sending a crafted sequence of HPA…
CVE-2026-82210NoneApache bRPC: Remote denial of service (crash) via malformed stream feedback frames
Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server process by sending a malformed stream feedback frame. Root Cause: When handling FRAME_TYPE_FE…
CVE-2026-82425NoneApache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service
A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the process, resulting in denial of service. Root Cause: When a Socket with health checking enabled fails, Socket::WaitAndR…
CVE-2026-96888High· 7.5Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9…
CVE-2026-101612Medium· 4.0mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101612)
A flaw was found in the MySQL InnoDB component. A local, highly privileged attacker with access to the underlying infrastructure, requiring interaction from another user, can exploit this vulnerability to cause a hang or repeatable crash. …
CVE-2026-101618Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)
A flaw was found in MySQL. A high-privileged remote attacker with network access can exploit this vulnerability in the InnoDB component to cause a Denial of Service (DoS). Successful exploitation allows the attacker to trigger a hang or re…
CVE-2026-101621Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)
A flaw was found in the InnoDB component of MySQL. A high-privileged remote attacker with network access could exploit this vulnerability to cause a Denial of Service (DoS). Successful attacks can result in an unauthorized hang or repeatab…
CVE-2026-101619Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)
A flaw was found in the InnoDB component of MySQL. A high-privileged attacker with network access could exploit this vulnerability to trigger an unexpected hang or crash of the database server. A successful attack can result in a complete …
CVE-2026-101637Medium· 5.5mysql: mysql: Denial of Service via InnoDB component (CVE-2026-101637)
A flaw was found in MySQL's InnoDB component. A high-privileged remote attacker with network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a Denial of Service (DoS). Additionally, explo…
CVE-2026-101727Medium· 4.9mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)
A flaw was found in MySQL within the Server Replication component. A remote attacker with high privileges and network access can exploit this vulnerability to trigger an unexpected hang or repeatable crash. This issue results in a complete…
CVE-2026-101749Medium· 4.9mysql: mysql: Denial of Service via security encryption component (CVE-2026-101749)
A flaw was found in MySQL. A remote attacker with high privileges and network access can exploit this vulnerability in the security encryption component to cause a Denial of Service (DoS). Successful exploitation can lead to a complete han…
CVE-2026-101756Medium· 4.9mysql: mysql: Denial of Service via GIS component (CVE-2026-101756)
A flaw was found in the Geographic Information System (GIS) component of MySQL. An authenticated remote attacker with high privileges can exploit this vulnerability over the network to cause a Denial of Service (DoS). Successful exploitati…
CVE-2026-101753Medium· 4.4mysql: mysql: Denial of Service in RAPID component (CVE-2026-101753)
A flaw was found in the RAPID component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. Successful exploitation results in a complete Denia…
CVE-2026-101780Medium· 6.5mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)
A flaw was found in the MySQL Server X Plugin component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability through network protocol requests. Successful exploitation allows the attacker …
CVE-2026-9825Low· 3.7IBM Cyber Fraud Reachable Assertion
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
CVE-2026-98729Medium· 5.5kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h (CVE-2026-98729)
A flaw was found in the Linux kernel. On systems utilizing specific AMD processors, improper virtual address alignment for huge page memory mappings can allow a local user to cause a Denial of Service (DoS). When unmapping these misaligned…
CVE-2026-98868Medium· 4.4kernel: dm-pcache: reject a kset that overruns its segment (CVE-2026-98868)
A flaw was found in the Linux kernel's dm-pcache driver. A local attacker capable of presenting a crafted storage device with forged metadata can cause cache operations to exceed segment boundaries. This flaw triggers a kernel assertion fa…
CVE-2026-98469Medium· 5.5kernel: KVM: arm64: Fix AArch32 DBGBXVR<n> handling (CVE-2026-98469)
A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) subsystem for ARM64 architectures. Improper handling of specific debug register accesses in 32-bit ARM (AArch32) mode causes the hypervisor to encounter an internal …
CVE-2026-98468Low· 2.5kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown race (CVE-2026-98468)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for ARM64. This flaw may allow a local user to cause a Denial of Service (DoS) or kernel instability. A race condition occurs when virtual machine stage 2 …
CVE-2026-98470Medium· 4.7kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode (CVE-2026-98470)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for ARM64. This vulnerability allows a local attacker to cause a Denial of Service (DoS). When running in protected mode, the kernel issues an internal war…
CVE-2026-98546Medium· 4.7kernel: arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 (CVE-2026-98546)
A flaw was found in the Linux kernel's ARM64 architecture support. When user-space access to performance monitoring counters is enabled, write traps for a write-only performance register are improperly configured during hypervisor initiali…