Important: freerdp

Issue Overview: Heap-buffer-overflow write in AVC444 YUV buffer allocation In libfreerdp/codec/h264.c, avc444ensurebuffer computes the AVC444 YUV444 intermediate buffer size as piDstSizex = piDstStridex padDstHeight using UINT32 arithmetic. When the true product exceeds UINT32MAX, the value wraps...

CVE-2026-67858

The CVE affects open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled via the MDNSD backend. A remote unauthenticated attacker can send RegisterServer or RegisterServer2 requests containing many unique discoveryUrls, triggering a denial-of-service. This i...

CVE-2026-67862

CVE-2026-67862 affects open62541 version 1.5.5, with a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c. The root cause is a buffer-overflow that enables a remote attacker to induce a denial of service. Connected sources (NVD, EUVD, Red Hat, Debian, CV...

CVE-2026-67859

Technical details for CVE-2026-67859 are not publicly available in the provided documents; monitor for updates.

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1450:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1450:01 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block directly...

Amazon Linux 2 : libxml2, --advisory ALAS2-2026-3827 (ALAS-2026-3827)

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3827 advisory. libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershel...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-2010)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2010 advisory. Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits o...

CVE-2026-67859

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling...

CVE-2026-67862

open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/uaclienthighlevel.c. This allows a remote attacker to cause a denial of service...

CVE-2026-67673

A stack-based buffer overflow vulnerability exists in the cmdedl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fwflash command, where the argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical...

JLSEC-2026-1160 GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability...

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

JLSEC-2026-1161 GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability...

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity...

JLSEC-2026-1155 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in...

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

K000162738: giflib vulnerability CVE-2026-26740

Security Advisory Description Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size. CVE-2026-26740 Impact There is no impact; F...

CVE-2026-18607

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation o...

CVE-2026-18607

The CVE-2026-18607 affects Wavlink devices including WN572, WN570H, WN573, WN529, WN530, WN531, WN535, WN536, WN551, WN557, and NU516 (firmware up to 20260609). The vulnerability targets the strcpy function in lighttpd’s file upload.cgi, where manipulating the HTTP_COOKIE argument triggers a stac...

Security update for rrdtool

This update for rrdtool fixes the following issue: CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

JLSEC-2026-1116 An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of...

An integer overflow vulnerability exists in the uncompressedfpdngloadraw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Important: Red Hat Security Advisory: libtiff security, bug fix, and enhancement update

An update for libtiff is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RLSA-2026:47184 Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 For more details about the security issues, including the impact, a CVSS...