CVE-2026-38349

FFmpeg contains an integer overflow vulnerability in the hScale16To19_c() function located within libswscale/output.c. An attacker can exploit this by providing a specially crafted image file to trigger a Denial of Service (DoS) , which may cause the application to crash or become unresponsive, t...

PT-2026-82762

Name of the Vulnerable Software and Affected Versions FFmpeg version N-122528-gdd2976b9e1 Description An integer overflow occurs in the libswscale/utils.c component. This issue allows attackers to trigger a Denial of Service DoS by providing a specially crafted image file. Recommendations At the...

AZL-97851 CVE-2026-80536 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read for that item: memcpyxfsbufoffsetbp, uintbit ribufi.iovbase, nbits...

CVE-2026-80537

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...

UBUNTU-CVE-2026-80536

In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read for that item: memcpyxfsbufoffsetbp, uintbit ribufi.iovbase, nbits...

CVE-2026-80537 xfs: fix off-by-one in rtrefcount btree root level validation

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...

CVE-2026-80537

CVE-2026-80537 is an off-by-one error in the Linux kernel's XFS filesystem, specifically in the realtime refcount btree root level validation. The functions xfs_rtrefcountbt_verify() and xfs_iformat_rtrefcount() use > instead of >= when checking the on-disk root level, allowing a crafted XF...

CVE-2026-80536

CVE-2026-80536 is an out-of-bounds write in the Linux kernel's XFS filesystem , specifically in xlog_recover_do_reg_buffer() during mount-time log recovery. The destination offset and buffer size are both attacker-controlled but only bounded by an ASSERT() that compiles away on production kernels...

CVE-2026-80536 xfs: bounds-check buffer log item's dirty bitmap

In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read for that item: memcpyxfsbufoffsetbp, uintbit ribufi.iovbase, nbits...

CVE-2026-48749

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can use a symlink in the rootfs directory to read or write arbitrary files on the host, potentially leading to command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

Linux Distros Unpatched Vulnerability : CVE-2026-80537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where th...

PT-2026-82153

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the root level validation of the rtrefcount btree within the XFS file system. The functions xfs rtrefcountbt verify and xfs iformat rtrefcount incorrectly u...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098798 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093172 advisory. Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service...

CVE-2026-80101

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

CVE-2026-55373

A flaw was found in OpenEXR. An attacker could trigger an infinite loop by providing a specially crafted sample count value UINTMAX when processing image data. This vulnerability, located in the SampleCountChannel component, prevents the application from progressing, leading to a denial of servic...

CVE-2026-55059

A flaw was found in OpenEXR, a widely used library for the EXR image format. A user processing a specially crafted image file could trigger a heap out-of-bounds write vulnerability in the SampleCountChannel::set function. This occurs due to an incorrect computation of the target Y coordinate,...

CVE-2026-13215 Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

PT-2026-81376

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2 init fs subsys/fs/ext2/ext2 impl.c by passing fs blocks = s blocks count - s first data block to ext2 bitmap count set. That helper subsys/fs/ext2/ext2 bitmap.c treats its argument as a number of bits and reads one bitma...

CVE-2026-62291

A flaw was found in libheif, a library for decoding and encoding HEIF and AVIF image formats. A remote attacker could exploit this vulnerability by providing a specially crafted image sequence with mismatched auxiliary alpha dimensions. During the image processing workflow, this could lead to...