SUSE-SU-2026:21197-1 Security update for vim

This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob bsc1259985. - CVE-2026-34714: crafted file can allow code execution bsc1261191. - CVE-2026-34982: Vim modeline bypass via various options bsc1261271...

PT-2026-33127

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A stack buffer overflow in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. This occurs when the application opens a specially crafted TIM image...

CVE-2026-27294

Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current use...

CVE-2026-27294

Adobe Framemaker (versions 2022.8 and earlier) is affected by an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the attacker’s context. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented with a CVSSv3.1 base...

EUVD-2026-22706

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2026-27287

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2026-27287 InCopy | Out-of-bounds Read (CWE-125)

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2026-27287

CVE-2026-27287 affects Adobe InCopy versions 20.5.2, 21.2 and earlier. It is an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file); attack vector is ...

CVE-2026-27287 InCopy | Out-of-bounds Read (CWE-125)

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2026-27289

CVE-2026-27289 describes an out-of-bounds read (CWE-125) in Adobe Photoshop Desktop versions 27.4 and earlier when parsing a crafted file. The vulnerability could allow code execution in the context of the current user and requires user interaction (the victim must open a malicious file). Affecte...

CVE-2026-27289 Photoshop Desktop | Out-of-bounds Read (CWE-125)

Photoshop Desktop versions 27.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

PT-2026-32913

InCopy | Out-of-bounds Read CWE-125 CVE: CVE-2026-27287 PT ID: PT-2026-32913 Vendor: Adobe Product: InCopy CVSS: 7.8 Credits: n/a Description: InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read pas...

PT-2026-32902

Name of the Vulnerable Software and Affected Versions Photoshop Desktop versions prior to 27.5 Description An out-of-bounds read occurs when parsing a crafted file, which can lead to a read past the end of an allocated memory structure. This issue allows an attacker to execute code within the...

Off-by-one Error

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error in the MSL decoder process. An attacker can cause a crash by providing a specially crafted MSL file. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - GitHub Commit ...

CVE-2026-29043

A flaw was found in HDF5, a software for managing data. An attacker who can control a specially crafted HDF5 .h5 file can trigger a write-based heap buffer overflow in the H5Trefmemsetnull method when the file is parsed. This vulnerability can lead to a denial-of-service condition, and potentiall...

CVE-2026-4152

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted JP2 JPEG 2000 file. This flaw is due to a heap-based buffer overflow during JP2 file parsing, which allows for arbitrary code execution. Successful exploitation enables the attacker ...

PT-2026-33164

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description An out of bounds read in Skia allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted file. An out of bounds read occurs when a...

golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file

A flaw was found in golang.org/x/image/tiff. A remote attacker could exploit this vulnerability by providing a maliciously crafted Tagged Image File Format TIFF file. This could cause the image decoding process to attempt to allocate up to 4 gigabytes GiB of memory. The excessive resource...

SUSE CVE-2026-5910

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: Low...