Pillow: Reachable Undefined Behavior In Native Integer Operations, Potentially Leading To Denial Of Service Or Logic Int

Summary Affected Object and Source Package: Pillow 12.3.0 Source: PyPI sdist pillow-12.3.0.tar.gz SHA-256: 3b8182a766685eaa002637e28b4ec8d6b18819a0c71f579bf0dbaa5830297cce Sink: src/imaging.c:2809:15, xsize += dx Details The code in Pillow 12.3.0 is: for xsize = 0; text; text++ int dx =...

Important: Red Hat Security Advisory: php:7.4 security update

An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Chromium CVE-2026-113239: Range error

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Important: Red Hat Security Advisory: php:7.4 security update

An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CLEANSTART-2026-DB41831 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

CVE-2026-56851 affects multiple packages. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. See references for individual vulnerability details...

OpenWRT odhcpd buffer error vulnerability

OpenWRT odhcpd versions 25.12 and earlier contain a buffer error vulnerability. This vulnerability arises because DHCPv6 self-loop detection directly uses the network byte-order length value of the DUID as the argument to memcmp at dhcpv6.c:720. On little-endian hosts, this may result in reading...

VideoLAN VLC for Android input validation error vulnerability

Versions of VideoLAN VLC for Android prior to 3.7.2 contain an input validation error vulnerability. This vulnerability arises because FileUtils.getUri trusts content URIs solely based on com.fsck.k9.attachmentprovider or gmail-ls authority. Unauthorized applications can exploit this by declaring...

baserproject baserCMS input validation error vulnerability

In versions prior to 5.3.2 of baserproject baserCMS, there is an input validation error vulnerability. This vulnerability arises because unauthenticated visitors can provide comma-separated address lists in the email field of public mail forms; the system fails to adequately validate this input. ...

Node.js Node processing logic error vulnerability

Node.js versions 26.12.0 and earlier contain a processing logic error vulnerability. This vulnerability arises because the zlib.ZipFile API fails to validate local headers and central directory headers locally; as a result, it caches the parsed local header without setting a content offset...

i18next-http-backend input validation error vulnerability

Version 4.0.2 of i18next-http-backend contains an input validation error vulnerability. This flaw stems from an incomplete fix in interpolateUrl, allowing attackers to redirect translation requests by providing a ns value starting with a slash. As a result, protocol-relative URLs hosted by...

Twisted Matrix Labs Twisted resource management error vulnerability

Versions of Twisted Matrix Labs Twisted prior to 26.10.0rc1 contain a resource management error vulnerability. This vulnerability arises because twisted.words.protocols.irc.IRC.dataReceived fails to limit line length; it retains bytes without newline characters prior to authentication. As a resul...

Part-DB resource management error vulnerability

Versions prior to Part-DB 2.13.2 contain a resource management error vulnerability. This vulnerability arises because the server’s “Download External Files” attachment feature fails to enforce the MAXATTACHMENTFILESIZE limit. Authentication users can thus bypass this limit, potentially leading to...

PT-2026-121817

JweDirectDecryptorBlock.Decrypt read a 64-bit plaintext length from the thales aad protected-header field and used it without any validation. A truncated field panics binary.BigEndian.Uint64, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics wit...

OpenStack Ironic resource management error vulnerability

Versions 30.0.0 through 32.1.1, 33.0.0 through 35.1.1, and 36.0.0 through 39.0.1 of OpenStack Ironic contain a resource management error vulnerability. This vulnerability arises because configdrive can lead to the inclusion of large amounts of uncompressed data i.e., gzip bombs, potentially...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 7, 8, 9, and 10 contain a buffer error vulnerability. This vulnerability stems from improper calculation of option data length by the DHCPv4 option parser within the iscsiuio component. As a result, data exceeding the allocated buffer is read into adjacent heap...

Twisted input validation error vulnerability

Versions of Twisted prior to 26.7.0rc1 contain an input validation error vulnerability. This vulnerability arises because twisted.names.dns.DNSDatagramProtocol only validates the 16-bit transaction ID without verifying whether the DNS response originates from the requested host and port. An...

Pypdf resource management error vulnerability

Versions of pypdf prior to 6.21.2 contain a resource management error vulnerability. This vulnerability arises when an attacker can craft a specially formatted PDF containing a standard cross-reference table with a claimed number of entries exceeding what the file can actually hold. As a result,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.12. It stems from a race condition related to route notification sizes. When the nexthop compatibility mode is enabled, concurrent replacement may increase the group size between independent snapshots. This causes fibdumpinfo to return...

Craft CMS Mollie for Craft Commerce input validation error vulnerability

Versions 2.1.1 through 4.4.3 of Craft CMS Mollie for Craft Commerce contain an input validation error vulnerability. This flaw arises because the Mollie webhook endpoint fails to verify whether the commerceTransactionHash and id parameters match. As a result, unauthenticated attackers can pair an...