FFmpeg 4.4 < 9.0 Out-of-Bounds Heap Write (CVE-2026-70632)

The version of FFmpeg installed on the remote host is 4.4 or later but prior to 9.0. It is, therefore, affected by an out-of-bounds heap write vulnerability: - An out-of-bounds heap write vulnerability in the native GoPro CineForm HD CFHD decoder allows remote attackers to corrupt heap memory by...

MiracleLinux 8 : isns-utils-0.99-1.el8_10.1 (AXSA:2026-1521:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1521:01 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block...

openSUSE 16: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (openSUSE-SU-2026:21553-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21553-1 advisory. This update for GraphicsMagick fixes the following issue: - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing...

FFmpeg 0.5 < 9.0 Multiple Vulnerabilities

The version of FFmpeg installed on the remote host is 0.5 or later but prior to 9.0. It is, therefore, affected by multiple vulnerabilities: - A signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c allows attackers to trigger a heap buffer overflow by...

openSUSE 16 Security Update : python-Pillow (openSUSE-SU-2026:21544-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21544-1 advisory. This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path...

FFmpeg 3.0 < 9.0 Multiple Vulnerabilities

The version of FFmpeg installed on the remote host is 3.0 or later but prior to 9.0. It is, therefore, affected by multiple vulnerabilities: - An uninitialized heap memory read vulnerability in the native RSCC decoder libavcodec/rscc.c allows attackers to disclose heap memory contents by supplyin...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2026:3571-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3571-1 advisory. This update for ImageMagick fixes the following issue: - CVE-2026-64685: heap buffer overread in BGR decoder due to...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3586-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3586-1 advisory. This update for ImageMagick fixes the following issue: - CVE-2026-64685: heap buffer over-read in BGR decoder due to...

UBUNTU-CVE-2026-73141

GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the Base64 decoder when processing crafted Base64-encoded input on platforms where the char type is signed. An attacker can cause an application crash by submitting specially crafted input. Remediation A fix was...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the Base64 decoder process. An attacker can cause a crash or corrupt heap memory by submitting specially crafted Base64-encoded input. Remediation A fix was pushed into the master branch but not yet published...

CVE-2026-19642

An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version...

CVE-2026-19643

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862...

CVE-2026-19643

AWS SDK for C++ base64 decoding exposed an out-of-bounds read on some platforms prior to 1.11.862, which could allow a remote authenticated user to crash an application processing crafted Base64 input. Remediation: upgrade to aws-sdk-cpp 1.11.862 or later. This CVE is documented across NVD and CV...

CVE-2026-19643 Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862...

CVE-2026-19643

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862...

EUVD-2026-57524

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862...

CVE-2026-19643 Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862...

CVE-2026-19643 Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862...

CVE-2026-19642 Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp

An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version...