CVE-2018-25305 librsvg2-bin 2.40.13 Buffer Overflow via Malformed SVG

librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files. Attackers can supply crafted SVG input to the rsvg conversion tool to trigger a segmentation fault in the cairo image compositor...

CVE-2018-25306 PDFunite 0.41.0 Buffer Overflow via Malformed PDF

PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF...

JLSEC-2026-357

A flaw was found in gnuplot. The xstrftime function may lead to a segmentation fault, causing a system crash...

JLSEC-2026-359

A flaw was found in gnuplot. The X11graphics function may lead to a segmentation fault and cause a system crash...

JLSEC-2026-356

A flaw was found in gnuplot. The GetAnnotateString function may lead to a segmentation fault and cause a system crash...

JLSEC-2026-358

A flaw was found in gnuplot. The CANVAStext function may lead to a segmentation fault and cause a system crash...

JLSEC-2026-309

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

JLSEC-2026-305

HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

CLSA-2026-1777286373 binutils: Fix of 5 CVEs

CVE-2025-11082: fix heap buffer overflow in bfdelfparseehframe - CVE-2025-5244: fix NULL deref in elfgcsweep for empty SECGROUP - CVE-2025-5245: fix SEGV in debugtypesamep / debugwritetype - CVE-2025-7545: fix heap buffer issue in objcopy copysection - CVE-2025-7546: fix corrupted group section...

PDFunite 安全漏洞

PDFunite is an open-source tool developed by poppler-utils, used for merging multiple PDF files into a single document. Version 0.41.0 of PDFunite contains a security vulnerability caused by a buffer overflow. This vulnerability could allow local attackers to cause the application to crash during...

PT-2026-35989

Name of the Vulnerable Software and Affected Versions PDFunite version 0.41.0 Description A buffer overflow allows local attackers to crash the application by processing malformed PDF files during merge operations. A segmentation fault can be triggered in the XRef::getEntry function within...

TencentOS Server 2: vim (TSSA-2026:0257)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0257 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

PT-2026-35988

Name of the Vulnerable Software and Affected Versions librsvg2-bin version 2.40.13 Description A buffer overflow occurs when processing malformed SVG files. Local attackers can supply crafted SVG input to the rsvg conversion tool to trigger a segmentation fault in the cairo image compositor,...

CVE-2026-33666

Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, in BitStreamReader.h readBytes / readString, the setBitPosition bounds check receives the overflowed value and is completely bypassed. The code then reads len bytes 512 MB fr...

JLSEC-2026-200

A Segmentation Fault issue discovered in in ieeesegment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file...

JLSEC-2026-186

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

kernel: net/sched: cls_u32: use skb_header_pointer_careful()

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a repro fooling u32classify: BUG: KASAN:...

Linux Distros Unpatched Vulnerability : CVE-2026-31592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Protect all of sevmemencregisterregion with kvm-lock Take and hold kvm-lock for before checking sevguest in sevmemencregisterregion, as sevguest isn't...

ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY

...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014327)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014327 advisory. In the Linux kernel, the following vulnerability has been resolved: quota: fix warning in dqgrab There's issue as follows when do fault injection: WARNING: CPU: 1...