CVE-2026-114054

vLLM versions before 0.31.0 are vulnerable to a cache aliasing flaw. This allows authenticated attackers to cause collisions in shared cache keys by providing caller-controlled values, such as EXIF ImageID or cache_salt . Specifically, an attacker can set a UUID EXIF ImageID to retrieve another r...

EUVD-2026-107005

vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cachesalt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match...

CVE-2026-114054 vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys

vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cachesalt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match...

CVE-2026-114054

vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cachesalt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match...

PT-2026-120821

Name of the Vulnerable Software and Affected Versions Pillow versions 11.0.0 through 12.x Description In the Python imaging library, the Exif.load function in src/PIL/Image.py repeatedly slices remaining EXIF data when it starts with a six-byte Exif header. Because src/PIL/PngImagePlugin.py accep...

PT-2026-120180

vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache salt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match...

MGASA-2026-0500 Updated perl-Imager package fixes security vulnerabilities

Buffer read underflows on 32-bit sizet systems decoding EXIF data. CVE-2026-73638 Palette off-by-one discloses uninitialized heap memory. CVE-2026-93018 TGA reader: signed colourmaplength causes process-killing allocator abort. CVE-2026-93019 Unvalidated rawdatachannels can cause incorrect memory...

Updated perl-Imager package fixes security vulnerabilities

Buffer read underflows on 32-bit sizet systems decoding EXIF data. CVE-2026-73638 Palette off-by-one discloses uninitialized heap memory. CVE-2026-93018 TGA reader: signed colourmaplength causes process-killing allocator abort. CVE-2026-93019 Unvalidated rawdatachannels can cause incorrect memory...

imago-forensics

imago-forensics 🕵️ Imago es una herramienta Python que extrae evidencias digitales de imágenes de forma recursiva. Esta herramienta es útil durante una investigación forense digital. Si necesitas extraer evidencias digitales y tienes muchas imágenes, a través de esta herramienta podrás compararlas...

CVE-2026-107736

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values ca...

CVE-2026-107736

SumatraPDF (version 3.6.1 and earlier) on Windows is vulnerable to a stack buffer overflow during the processing of EXIF Orientation metadata. The issue resides in the MaybeFlipBitmap() function, which uses GDI+ to read an attacker-controlled PropertyTagOrientation size via GetPropertyItem() into...

CVE-2026-107736 SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values ca...

CVE-2026-107736 SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values ca...

PT-2026-108304

Name of the Vulnerable Software and Affected Versions SumatraPDF versions prior to 3.6.2 Description The MaybeFlipBitmap function uses GetPropertyItem to read the PropertyTagOrientation size via GDI+ into a fixed 64-byte buffer on the stack. An attacker can trigger a stack-based buffer overflow b...

Astra Linux – Vulnerability in libimage-exiftool-perl

In ExifTool’s lib/Image/ExifTool.pm, version 12.38 incorrectly handles the $file = /|$/ check, resulting in command injection...

Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-debuginfo / etc (crlsa-2024_9056)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249056 advisory. gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 8 [CIQ] Security Update: libexif / libexif-debuginfo / libexif-debugsource / libexif-devel (crlsa-2020_5393)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20205393 advisory. libexif: out of bounds write due to an integer overflow in exif-entry.c CVE-2020-0452 Tenable has extracted the preceding description block directly from the CIQ...

CentOS Linux 6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1776958404)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1776958404 advisory. - When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caus...

CVE-2026-39372

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

EUVD-2026-87122

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...