CVE-2026-77118

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

CVE-2026-77118 Out-of-bounds write in GraphicsMagick PCD decoder

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

kernel: udf: fix partition descriptor append bookkeeping

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially...

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...

kernel: udf: fix partition descriptor append bookkeeping

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially...

CVE-2026-76350

creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:09+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76252

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:05+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-66140 vulnerabilities

Vulnerabilities for packages: exim...

GO-2026-6182 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-58470 vulnerabilities

Vulnerabilities for packages: wget...

GO-2026-6185 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6189 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-5704 vulnerabilities

Vulnerabilities for packages: gnutar...

CVE-2026-48840 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-JR6H-R7VG-F9MC vulnerabilities

Vulnerabilities for packages: druid...

GO-2026-6237 vulnerabilities

Vulnerabilities for packages: kube-vip, cni-plugins...

CVE-2026-3441 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-J3RV-75WM-77RM vulnerabilities

Vulnerabilities for packages: binutils...

PT-2026-79050

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4 decompress saf...