Ezinne Kalu

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service.

**Name of the Vulnerable Software and Affected Versions** Progress Software Fiddler Everywhere version 8.0.2 **Description** Missing authentication in the local .NET backend (Fiddler.WebUi) allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate. This is achieved through an unauthenticated localhost HTTP and SignalR RPC channel. SignalR is a library that simplifies adding real-time web functionality to applications. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Progress Telerik Fiddler Everywhere versions prior to 8.2.0 **Description** Exposure of privileged Inter-Process Communication (IPC) functionality allows a local, low-privileged attacker to replace the application UI or settings with attacker-controlled content. This is possible if the attacker can modify application launch parameters and persuade a user to start the application. Successful exploitation may lead to the disclosure of OAuth authentication tokens, the execution of locally accessible programs, or the unauthorized modification of application-generated configuration files. **Recommendations** Update Progress Telerik Fiddler Everywhere to version 8.2.0 or later.

**Name of the Vulnerable Software and Affected Versions** Samsung Opensource Escargot version ac94df78493ee6fede286620d94f724e46b4d238 **Description** An integer overflow or wraparound issue exists where attackers with write access to the bytecode-cache directory can trigger a heap-based buffer overflow. This is achieved by using a crafted cache file, which can lead to a denial of service. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung walrus version ff3bf5ff5c4878f8e5572c9593d303f6bc997443 **Description** An integer overflow occurs during the source-bounds check within the `Memory::init()` function (located in src/runtime/Memory.cpp). A remote attacker can exploit this by providing a crafted WebAssembly module where a 32-bit unsigned addition wraps around, bypassing the bounds check. This leads to an out-of-bounds heap read—a condition where the system reads data beyond the allocated memory buffer—resulting in a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Open Source TizenFX (affected versions not specified) **Description** An out-of-bounds write and improper validation of array index in Samsung Open Source TizenFX allows for buffer overflows. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory locations. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eclipse SW360 versions 19.0.0 through 20.1.0 **Description** When the system is configured to use file system storage via the `enable.attachment.store.to.file.system` config key, an attacker can manipulate the filename during upload. This allows for arbitrary file path traversal, a technique used to access files and directories that are stored outside the intended folder. **Recommendations** Update to a fixed version. Disable the `enable.attachment.store.to.file.system` configuration key as a temporary workaround.