CWE-1286

Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835

rack · rack

Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser

hickory-dns · hickory-dns

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

Samsung Semiconductor · Exynos 1080

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

Samsung Semiconductor · Exynos 1080

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…

MediaTek, Inc. · MediaTek chipset

Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service

WatchGuard · Fireware OS

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv

Cpanel-JSON-XS

Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse

Text-CSV_XS

Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit

mtrudel · bandit

Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution

Juniper Networks · Junos OS