CVE-2026-77214

A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist ...

DEBIAN-CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214 libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214 libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214

The libexpat library (versions prior to commit 13c5f63 ) contains a heap buffer over-read vulnerability in xmlparse.c. The XML_ParseBuffer function fails to validate the caller-supplied len against the allocated buffer size when updating parser->m_bufferEnd. Consecutive calls to XML_ParseBuffe...

CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

EUVD-2026-94368

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-106061 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-106061

A flaw in GIMP 's X cursor (XMC) thumbnail loader allows for a heap buffer over-read . The issue occurs because the software uses 32-bit signed arithmetic to calculate the pixel buffer size (width * height) for thumbnails. An integer overflow (CWE-190) in this calculation can result in an undersi...

PT-2026-107540

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.9.0 Description A heap buffer over-read exists in the xmlparse.c file. The XML ParseBuffer function advances the parse buffer end using a caller-supplied length that is not validated against the allocated buffer...

CVE-2026-19029 HDF5 scale-offset filter heap buffer over-read via crafted chunk

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

CVE-2026-19029

HDF5 versions through 2.2.0 are vulnerable to a heap-based buffer over-read within the H5Z__filter_scaleoffset() function located in src/H5Zscaleoffset.c. The root cause occurs when the decoder copies d_nelmts * size bytes from a compressed chunk without verifying if the chunk contains sufficient...

CVE-2026-19029

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

CVE-2026-19029 HDF5 scale-offset filter heap buffer over-read via crafted chunk

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed's ancient cousin, hiding in Squid since 1997. ✨ Features Single-file PoC — Zero dependencies Malicious FTP server mimicking NetWare banner + truncated LIST response Real-time detection and decoding of Basic Auth + Bearer tokens Multi-threaded heap...

CVE-2019-19203

CVE-2019-19203 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. Researcher: ManhND of The Tarantul...

CVE-2019-19203

CVE-2019-19203 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. Researcher: ManhND of The Tarantul...

CVE-2025-23134_fixes_code

CVE-2026-34180 – Изменения в патче Патч устраняет проблему усечения целых чисел в коде декодирования ASN.1/DER библиотеки OpenSSL. Были внесены следующие изменения: 1. Обновлён тип длины содержимого ASN.1 Параметр len функции asn1exc2i изменён с int на long. Это позволяет функции принимать и...