CVE-2026-111165

A flaw was found in libmikmod. An attacker can provide a specially crafted MultiTracker MTM audio file to an application utilizing the library. Because the file parser does not properly validate the module channel count, parsing the file triggers an out-of-bounds memory read. This issue can cause...

CVE-2026-111158

A flaw was found in libmseed. A heap-based out-of-bounds read vulnerability exists in the ms3detect function when processing truncated record buffers. By tricking a user or application into parsing a specially crafted input, an attacker can cause the library to read past allocated memory...

CVE-2026-111155

A flaw was found in libtimidity. The SoundFont loader fails to properly validate sample and instrument index values, leading to an out-of-bounds memory read. An attacker could exploit this vulnerability by providing a specially crafted SoundFont .sf2 audio file, causing the application to crash a...

CVE-2026-111139

A flaw was found in libnsbmp. This vulnerability allows an attacker to cause a Denial of Service DoS by tricking an application into processing a specially crafted icon ICO file. Due to improper bounds checking when decoding mask data for an image whose bitmap width is not an expected multiple of...

CVE-2026-111152

A flaw was found in game-music-emu. This flaw allows an attacker to cause a Denial of Service DoS by crashing applications that process untrusted audio files. By providing a specially crafted ZXAYEMUL file with an oversized track table, an integer underflow in the AY loader triggers an...

CVE-2026-111138

A flaw was found in libnsbmp. An attacker can exploit this vulnerability by providing a specially crafted bitmap BMP image file to an application utilizing the library. Due to improper bounds checking during the decoding of compressed image data, processing the malformed image triggers an...

CVE-2026-111149

A flaw was found in FreeImage. By providing a specially crafted PICT image file with manipulated row dimensions, an attacker could trigger an out-of-bounds read in the image unpacking routine. This vulnerability could lead to a Denial of Service DoS by causing the application to crash or result i...

CVE-2026-111153

A flaw was found in game-music-emu. The library fails to properly validate the voice count in audio headers, leading to an out-of-bounds read vulnerability during file processing. By convincing a user or application to open a specially crafted NES Sound Format NSF music file, an attacker can cras...

CVE-2026-111131

A flaw was found in libxmp. An attacker could exploit an off-by-one stack out-of-bounds read in the P61A depacker by convincing a user or service to process a specially crafted audio module file. Successful exploitation could lead to an application crash, resulting in a Denial of Service DoS, or...

EUVD-2026-102931

Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...

CVE-2026-96424 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager

Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...

CVE-2026-96424

The lomiri-download-manager suite is vulnerable due to an incorrect DBus policy within the lomiri-upload-manager component. This misconfiguration allows an arbitrary user to perform an arbitrary file read as root over DBus. The vulnerability is classified under CWE-732 (Incorrect Permission Assig...

CVE-2026-90414

A flaw was found in the Linux kernel's IB/isert module. A remote attacker, after successful login, could send a specially crafted data packet PDU with a declared length exceeding the actual received data. This could lead to an out-of-bounds read of the receive buffer, potentially causing a system...

CVE-2026-89786

A flaw was found in the ext4 filesystem component of the Linux kernel. The ext4readinlinedir function can read a directory entry header beyond the allocated buffer, leading to an out-of-bounds read. A local attacker could exploit this vulnerability by interacting with the filesystem, potentially...

CVE-2026-89779

A flaw was found in the Linux kernel's ntfs3 filesystem driver. This vulnerability allows a local attacker to craft an Extended Attribute EA record with an undersized ef-size value. When processed, this can lead to an out-of-bounds read, resulting in the disclosure of sensitive heap memory to...

CVE-2026-85745

A flaw was found in MariaDB. An authenticated database user can exploit an out-of-bounds read vulnerability by supplying a specially crafted spatial geometry to the STArea function. This issue allows reading beyond allocated memory buffers, leading to unauthorized information disclosure of intern...

CVE-2026-90011

A flaw was found in the Linux kernel's iSCSI target component. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted login payload to an iSCSI portal configured for Challenge-Handshake Authentication Protocol CHAP. This can lead to an out-of-bounds read,...

CVE-2026-55836 Open Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad)

Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.13.0 until 1.27.2, 1.28.2, and 1.29.0, importdocumentrow in src/openzaak/components/documenten/tasks.py uses the attacker-controlled bestandspad CSV field without ensuring that the resolved path remains...

CVE-2026-55836

The Open Zaak data and services layer is vulnerable to path traversal and arbitrary server-file read in versions 1.13.0 through 1.27.2, 1.28.2, and 1.29.0. The root cause lies in the _import_document_row function within src/openzaak/components/documenten/tasks.py, which fails to validate that the...

CVE-2026-111728

Seanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper authorization, allowing unauthenticated LAN or Tailnet clients to bypass the privileged mediastream settings guard by setting transcodeHwAccel to custom and supplying attacker-controlled decodeFlags...