AZL-110298
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110298.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-110298
- Upstream
- CVE-2026-107928
- Published
- 2026-10-20T21:17:15Z
- Modified
- 2026-10-27T05:36:16Z
- Summary
- CVE-2026-107928 affecting package tensorflow 2.16.1-11
- Details
-
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when
gnutls_record_send()returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked send. - References