CVE-2026-19695

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19694

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

EUVD-2026-57745

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19694

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19695

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

EUVD-2026-57744

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19696

CVE-2026-19696 concerns an out-of-bounds write in Wireshark’s BLF file parser, affecting Wireshark versions 4.6.0 through 4.6.7 and potentially causing a denial-of-service on Windows. The vulnerability is triggered during parsing of BLF files (as used by Ixia IxVeriWave and Vector Informatik flow...

CVE-2026-19696

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows...

CVE-2026-71394

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. The parser can return a structure with uninitialized heap memory when a specially crafted font file is processed due to an improper validation. This can lead to the use of uninitialized heap data, potentially resulting in...

CVE-2026-20348

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...

CVE-2026-20348

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...

CVE-2026-20346 ClamAV PDF File Format Processing Memory Corruption Vulnerability

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...

CVE-2026-20337

CVE-2026-20337 concerns ClamAV’s zip archive parser. The issue arises from improper boundary checks for content in zip files during scanning, which can trigger an out-of-bounds write. An unauthenticated, remote attacker could submit a crafted zip file for scanning, potentially causing the ClamAV ...

CVE-2026-16768

CVE-2026-16768 affects the gdk-pixbuf ICO parser. A specially crafted ICO file with pixel values outside the defined palette range allows an out-of-bounds read due to insufficient bounds checking against the actual palette size. This causes heap bytes to be interpreted as valid palette indices an...

CVE-2026-64624 FreeRDP RDP File Parser Remote Code Execution via CLI Options

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass...

CVE-2026-64624 FreeRDP RDP File Parser Remote Code Execution via CLI Options

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass...

CVE-2026-64624

CVE-2026-64624 affects FreeRDP prior to 3.28.0. The issue arises because lines starting with a forward slash in RDP files are treated as raw command-line options, exposing the CLI parser surface to untrusted files. This enables attackers to craft malicious RDP files leveraging options such as /rd...

GitLab CE/EE - Remote Code Execution

GitLab CE/EE starting from 11.9 does not properly validate image files that were passed to a file parser, resulting in a remote command execution vulnerability. This template attempts to passively identify vulnerable versions of GitLab without the need for an exploit by matching unique hashes for...

PYSEC-2026-2779 Open Babel has out-of-bounds write in PQS coord_file parser

Summary A memory-safety vulnerability in Open Babel's PQS parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the coordfile parsing path of the PQS reader. A malformed coord file specifier caused the parser to write past the end of its destination...