CVE-2026-77652

creationtimestamp| type| source ---|---|--- 2026-08-26 21:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtza4moef32b 2026-08-27 01:00:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtzninc3pd2t 2026-08-27 01:00:40+00:00| seen|...

UBUNTU-CVE-2026-77652

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...