548 matches found
godot-security-pocs
Godot security PoCs Reproduction material for security vulnerabilities in Godot Engine, published at each bug's disclosure. One directory per disclosure, named by disclosure date and topic. Index Disclosure| Directory| Bugs ---|---|--- 2026-09-21 — untrusted-file parsers|...
Fedora 44 : gegl04 (2026-34e59263ad)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-34e59263ad advisory. This update fixes an overflow in parsing RGBE/HDR image files. Tenable has extracted the preceding description block directly from the Fedora security...
Fedora 43 : gegl04 (2026-b5ff201bad)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b5ff201bad advisory. This update fixes an overflow in parsing RGBE/HDR image files. Tenable has extracted the preceding description block directly from the Fedora security...
PT-2026-121926
In the Linux kernel, the following vulnerability has been resolved: net: always dissect GSO packets in virtio net hdr to skb Commit 9e8db5913264 "net: avoid false positives in untrusted gso validation" added a '&& skb-network header' check before flow-dissecting GSO packets without VIRTIO NET HDR...
Important: Red Hat Security Advisory: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing
A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...
Important: Red Hat Security Advisory: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing
A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...
Important: Red Hat Security Advisory: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing
A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...
RHEL 9 : gegl04 (RHSA-2026:85253)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85253 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...
RHEL 9 : gegl04 (RHSA-2026:84575)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:84575 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...
RHEL 9 : gegl04 (RHSA-2026:85254)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85254 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...
PT-2026-116774
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the llc mac hdr init function failure leads to memory leaks and a Use-After-Free UAF condition. In the llc conn ac resend i xxx x set 0 or send rr function, a failu...
PT-2026-116698
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libiscsi tcp component where the iscsi tcp hdr dissect function fails to verify the data direction of a Data-In PDU Protocol Data Unit. When a target responds to a...
PT-2026-116751
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 implementation where the ipv6 find hdr function fails to verify if the calculated offset of an extension header chain exceeds the total packet length skb-len...
Astra Linux – Vulnerability in libstb
A issue was discovered in stbstbimage.h versions 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length data. An attacker could potentially cause a denial of service in applications that use stbimage by submitting crafted HDR files...
Astra Linux – Vulnerability in libstb
stbimage is a single-file library licensed under MIT that is used for processing images. The stbigetn function reads a specified number of bytes from the context usually a file into the specified buffer. If the file stream points to the end of the file, it returns zero. There are two places where...
SUSE CVE-2026-110734
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR .hdr image decoder modules/hdr/imageloaderhdr.cpp. The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's...
UBUNTU-CVE-2026-110734
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR .hdr image decoder modules/hdr/imageloaderhdr.cpp. The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's...