CVE-2026-12670
Medium · 5.3CVSS
5.3
EPSS
0.2%
Published
Oct 19, 2026
CISA due date
—
The record
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119340 Tesseract is an open source OCR engine. CWE-681
- CVE-2026-118769 Botan is a C++ cryptography library. CWE-681
- CVE-2026-114654 A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver… CWE-681
- CVE-2026-114118 Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in… CWE-681
- CVE-2026-106432 The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value… CWE-681
- CVE-2026-98095 In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast… CWE-681
- CVE-2026-98049 In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the… CWE-681
- CVE-2026-88387 LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in… CWE-681