UBUNTU-CVE-2026-111133

libfsapfs through 20260921 contains an integer underflow in libfsapfskeyencryptedkeyreaddata that allows attackers to trigger heap out-of-bounds reads via crafted KEK attributes. Attackers can supply a crafted encrypted APFS image with malformed HMAC or wrapped KEK attribute lengths to crash...

UBUNTU-CVE-2026-111131

libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...

Linux Distros Unpatched Vulnerability : CVE-2026-110716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshieldgetfiletable that allows attackers to read past heap allocations via unchecke...

Linux Distros Unpatched Vulnerability : CVE-2026-111166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplyi...

Linux Distros Unpatched Vulnerability : CVE-2026-111159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewflefextendedattributereaddata because UTF-16 name and value sizes are validated...

Linux Distros Unpatched Vulnerability : CVE-2026-111271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2 in src/loadams.cpp that allows attackers to read...

Adobe FrameMaker 2022 < 17.0.10.928 (2022.0.10.928) / Adobe FrameMaker 2026 < 18.0.1.312 (2026.0.1.312) Multiple Vulnerabilities (APSB26-172)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2022 17.0.10.928 / Adobe FrameMaker 2026 18.0.1.312. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-172 advisory. - Adobe Framemaker is affected by an out-of-bound...

Linux Distros Unpatched Vulnerability : CVE-2026-111152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Game Music Emu libgme through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader getdata function caused by an integer underflow in the...

Linux Distros Unpatched Vulnerability : CVE-2026-111132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-110918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity:...

Adobe Substance 3D Sampler < 6.0.4 Multiple Vulnerabilities (APSB26-159)

The version of Adobe Substance 3D Sampler installed on the remote host is prior or equal to 6.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-159 advisory. - Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in...

Linux Distros Unpatched Vulnerability : CVE-2026-111130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slidepositions array via...

CVE-2026-46472

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

SUSE CVE-2026-93683

A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an...

SUSE CVE-2026-100236

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...

SUSE CVE-2026-110598

Libyal libpff through 20260926 contains an integer underflow in libpffrecordentrygetmultivalue that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PTMVSTRING8, PTMVUNICODE or PTMVBINARY offsets ...

SUSE CVE-2026-110606

LibreCAD libdxfrw through LC2.2.0 LibreCAD through 2.2.1.5 contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader caused by calling strlen on non-NUL-terminated buffers. Attackers can supply a crafted AC1018, AC1024 or AC1027 DWG file without NUL bytes in the...

SUSE CVE-2026-110716

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshieldgetfiletable that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range filetableoffset or large file counts to...

CVE-2026-111272

A flaw was found in LibRaw. A heap-based out-of-bounds read vulnerability occurs in the Nikon metadata parser when handling image files with malformed tag data. An attacker could exploit this issue by convincing a user or automated process to decode a specially crafted Nikon image file, causing...