https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:59:44 +0000 https://vulnerability.circl.lu/vuln/cve-2026-41401 <p><strong>Affected:</strong> libyang</p> <p>libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.</p> <p><strong>Affected:</strong> libyang</p> <p>libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.</p> https://vulnerability.circl.lu/vuln/cve-2026-41401 https://vulnerability.circl.lu/vuln/usn-8485-1 <p><strong>Affected:</strong> Ubuntu:25.10: libyang, Ubuntu:26.04:LTS: libyang</p> <p>It was discovered that libyang incorrectly handled certain metadata list pointers. An attacker could use this issue to cause libyang to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:25.10: libyang, Ubuntu:26.04:LTS: libyang</p> <p>It was discovered that libyang incorrectly handled certain metadata list pointers. An attacker could use this issue to cause libyang to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-8485-1