Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Oz Kaiser

#44852of 60,399
6.9Total CVSS
Vulnerabilities · 2
N/A
1
Medium
1
PT-2026-145239
2026-11-11
N/A
CVE-2026-109163
Apache
Apache Http Server
Stack-based buffer overflow vulnerability in Apache HTTP Server's mod vhost alias (after CVE-2026-63292) This issue affects Apache HTTP Server: 2.4.69.
PT-2026-137731
2026-11-05
6.9
CVE-2026-119434
Silviucpp
Ezstd
Improper handling of highly compressed data (data amplification) allows an attacker to exhaust memory and terminate the Erlang VM. By supplying a zstd frame to the `ezstd:decompress using ddict/2` function, an attacker can use a small frame that declares a very large content size to trigger an unbounded allocation. Specifically, the `zstd nif decompress using ddict` function in `c src/ezstd nif.cc` uses `ZSTD getFrameContentSize` to read the declared size and passes it to `enif make new binary` without the 1 GiB `MAX BUFFER SIZE` check applied in other paths. Because this allocation occurs within a Native Implemented Function (NIF), exceeding available memory causes the operating system to kill the entire BEAM process (the Erlang VM) rather than just the calling process.