CVE-2026-112048 libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...

CVE-2026-112011

libtta through 2.3 contains an integer overflow vulnerability in ttadecoderinitgetinfo that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the seek...

CVE-2026-112011

The libtta library (through version 2.3 ) is vulnerable to an integer overflow within the tta_decoder_init_get_info() function. This flaw occurs when the application processes unvalidated header fields from a crafted .tta file . Specifically, by providing a sample rate of 1 and a large samples va...

CVE-2026-112011 libtta through 2.3 Integer Overflow via tta_decoder_init_get_info Seek Table

libtta through 2.3 contains an integer overflow vulnerability in ttadecoderinitgetinfo that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the seek...

EUVD-2026-103464

libtta through 2.3 contains an integer overflow vulnerability in ttadecoderinitgetinfo that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the seek...

CVE-2026-112052: Integer Overflow or Wraparound

libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in ggwkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite...

CVE-2026-112048: Memory Allocation with Excessive Size Value

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...

CVE-2026-112011: Integer Overflow or Wraparound

libtta through 2.3 contains an integer overflow vulnerability in ttadecoderinitgetinfo that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the seek...

PT-2026-116635

Name of the Vulnerable Software and Affected Versions libspatialite versions prior to 5.1.1 Description An integer overflow exists in the WKB point and vertex count size guard within the ParseWkbLine function and related parsers in gg wkb.c. This flaw allows out-of-bounds reads when processing a...

SpatiaLite resource management error vulnerability

SpatiaLite 5.1.0 and earlier versions have a resource management vulnerability. This vulnerability stems from ParseWkbPolygon not verifying the number of looped edges in polygons. Attackers can exploit this by using specially crafted geometry BLOBs to trigger uncontrolled internal loop assignment...

CVE-2026-111147

Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedbrecordgetmultivalue that allows attackers to read past buffers via unbounded multi-value offset tables. Attackers can supply a crafted ESE/EDB database processed by esedbexport to crash the application or...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, the MAT decoder used 32-bit arithmetic due to incorrect parenthesization, resulting in a heap over-read. This vulnerability has been fixed in versions 7.1.2-16...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: “mm/writeback: fix possible divide-by-zero in wbdirtylimits, again” This issue was addressed by reverting to the previous behavior. The patch series “mm: Avoid possible overflows in dirty throttling” also addresses this issue. Th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - BPF: The rcureadlockTraceheld function in bpfmaplookuppercpuelem needs to be checked. The bpfmaplookuppercpuelem helper function is also available for sleepable BPF programs. When BPF JIT is disabled or on a 32-bit host,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand function is supposed to wait for the write buffer to become available or return an error. However, instead, it updates the transfer buffer and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libpcap (UTSA-2026-130086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130086 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BP...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pcre2 (UTSA-2026-130047)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130047 advisory. PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of- bounds write. Tenable has extracted the preceding description...

DEBIAN-CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

CVE-2026-109964 ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

CVE-2026-109964 ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...