CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

EUVD-2026-83381

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

CVE-2026-57226 Suricata swf: heap buffer overflow in SWF decompression depth handling

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

CVE-2026-61714 FluidSynth: Heap Buffer Overflow in MIDI Player

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-61714 FluidSynth: Heap Buffer Overflow in MIDI Player

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-61714

FluidSynth (SoundFont 2 software synthesizer) versions 2.2.4 through 2.5.6 contain a heap buffer overflow in the MIDI player. When synth.midi-channels is configured above the default of 16, the code indexes _fluid_player_t::channel_isplaying outside its fixed-size heap allocation, causing out-of-...

CVE-2026-61714 FluidSynth: Heap Buffer Overflow in MIDI Player

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-61721

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loopstart and wsmp.looplength values to samples without calling fluidsamplevalidate or fluidsamplesanitizeloop. A crafted DLS file can place...

CVE-2026-61721 FluidSynth: Heap-based buffer overrun for DLS samples

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loopstart and wsmp.looplength values to samples without calling fluidsamplevalidate or fluidsamplesanitizeloop. A crafted DLS file can place...

CVE-2026-58264

FluidSynth , a software synthesizer based on the SoundFont 2 specifications, is affected by an out-of-bounds heap write in its command handler. The pitch_bend_range command accepts a channel argument that is not bounds-checked before writing the supplied value through the selected synth channel. ...

DEBIAN-CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

UBUNTU-CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893 Heap based buffer overflow at ipaccess_proxy_read_msg()

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

EUVD-2026-83272

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893

The osmo-bsc software, versions 1.0.1 through 1.14.1 , is vulnerable to a heap-based buffer overflow issue. The flaw exists in the ipaccess_proxy_read_msg() function and is triggered via IPA frame lengths . While the vulnerability is documented across multiple security advisories, the provided do...

Wordfence Argus Discovers Critical Vulnerability in libheif, the Library That Opens iPhone Photos on Your Server

On September 1, 2026, the libheif project released version 1.23.3, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported four days earlier. The libheif maintainer, Dirk Farin, gave it a score of 9.8 out of 10 on the CVS...

CVE-2026-68513

A flaw was found in PyOpenEXR, a component of OpenEXR. A heap buffer overflow can occur when processing a specially crafted EXR image file. This vulnerability is triggered by a channel-name key collision between literal and prefixed RGB channels, causing the software to write data beyond the...

Updated gdk-pixbuf2.0 packages fix security vulnerabilities

Heap‑buffer‑overflow in gdk‑pixbuf. CVE-2025-7345 Out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...