CVE-2026-121950

FreeRDP versions prior to 3.32.2 are vulnerable to a heap buffer overflow due to an integer wrap in the gdi_CreateSurface function. The issue occurs when handling an RDPGFX CREATE_SURFACE PDU because the software fails to validate the product of surface dimensions. On 32-bit builds , this allows ...

CVE-2026-121950 FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap

FreeRDP before 3.32.2 does not check the product of surface dimensions in gdiCreateSurface when handling an RDPGFX CREATESURFACE PDU, causing an integer wrap and heap buffer overflow on 32-bit builds and an approximately 4 GiB allocation on 64-bit builds. A malicious RDP server can send a...

CVE-2026-100408

In Git for Windows (versions 2.43.0.windows.1 through 2.55.0.windows.3 ), a heap overflow exists in contrib/credential/wincred/git-credential-wincred.c. When erasing a git:* credential that contains a password field, the match_cred_password() function incorrectly calculates the destination capaci...

CVE-2026-100407

In Git for Windows versions 2.44.0.windows.1 through 2.55.0.windows.3 , a heap overflow exists in the git-credential-wincred store operation located in contrib/credential/wincred/git-credential-wincred.c. The vulnerability occurs because _scwprintf() fails to account for the terminating NUL chara...

CVE-2026-121513

Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS...

CVE-2026-121513

The µD3TN v0.15.1 SPP Parser contains an Off-by-one Heap Overflow (CWE-787) that allows an unauthenticated remote attacker to reliably cause a Denial of Service (DoS) . No specific remediation or exploit links are provided in the documents.

CVE-2026-121513 Out-of-bounds Write in µD3TN

Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS...

CVE-2026-121513

Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS...

EUVD-2026-115833

Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS...

CVE-2026-121513 Out-of-bounds Write in µD3TN

Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS...

CVE-2026-104064

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnerability in the scimgdataloadertiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with large tile width, height and sample values for a user ...

CVE-2026-121513: D3TN GmbH µD3TN: Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS

Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS...

EUVD-2026-115371

psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each later FETCH reply without checking that it matches. A server not trusted under current SSL settings can answer a later FETCH with more columns and make the driver write tuple...

SUSE CVE-2026-104064

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnerability in the scimgdataloadertiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with large tile width, height and sample values for a user ...

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv...

CVE-2026-120436

The Netpbm image processing library (versions before 10.86.51 , 11.x before 11.02.30 , and 11.03 before 11.15.08 ) is vulnerable to a heap buffer overflow within the jbigtopnm component. The root cause is an integer overflow occurring during the calculation of the output buffer size. An attacker ...

CVE-2026-120436 Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnm

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbgdecmergeplanes overflows th...

CVE-2026-120436 Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnm

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbgdecmergeplanes overflows th...

CVE-2026-120435

The Netpbm image processing library contains a heap buffer overflow in the xpmtoppm component. The vulnerability is caused by an unvalidated characters-per-pixel value in the XPM header; an attacker can supply a crafted XPM file with a value greater than 3 to overrun fixed 3-byte colorName hash e...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in bytesext put/get The ipccontroldata buffer is allocated as kzallocmaxsize, where maxsize covers the entire struct sofipcctrldata including its flexible array payload. However, the...