CVE-2026-63632 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...

CVE-2026-63632 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...

Security update for snphost

This update for snphost fixes the following issues: CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270541. CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrapkey bsc1270642. CVE-2026-41681: openssl: stack...

SUSE-SU-2026:3642-1 Security update for snphost

This update for snphost fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270541. - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrapkey bsc1270642. - CVE-2026-41681: openssl:...

CVE-2026-40468 affecting package gawk for versions less than 5.2.2-2

CVE-2026-40468 affecting package gawk for versions less than 5.2.2-2. A patched version of the package is available...

CVE-2026-19968

A flaw was found in Open Asset Import Library Assimp. A remote attacker could exploit a heap-based buffer overflow vulnerability in the ReadFaces3DGSMDL7 function of the 3DGS MDL7 Model Parser by providing a specially crafted 3DGS MDL7 model file. This could lead to a denial of service. Mitigatio...

ANT-2026-VTJ2W5KM · graphicsmagick · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-VTJ2W5KM: Heap-buffer-overflow in pcx.c:1186 A...

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in find_symbol

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5497926928105472 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 9 Crash Address:...

ANT-2026-GY2SF1XW · grok · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-GY2SF1XW: Heap-buffer-overflow in...

AlmaLinux 8 : libXfont2 (ALSA-2026:55446)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55446 advisory. libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Fo...

Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-017 (ALASGIMP-2026-017)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-017 advisory. A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by...

PostgreSQL Remote Code Execution

PostgreSQL versions 14.0 through 14.23, 15.0 through 15.18, 16.0 through 16.14, 17.0 through 17.10, and 18.0 through 18.5 contain a heap buffer overflow in tochar when processing timezone abbreviations. An authenticated remote attacker able to execute SQL statements can exploit the vulnerability ...

Linux Distros Unpatched Vulnerability : CVE-2026-74404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snpfilterreservedmemregions off-by-one Sashiko notes: regarding the bounds...

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2053)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2053 advisory. FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client rand...

MiracleLinux 8 : libXfont2-2.0.3-2.el8_10.3 (AXSA:2026-1563:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1563:03 advisory. libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow ...

Amazon Linux 2023 : spice-vdagent (ALAS2023-2026-2061)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2061 advisory. A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer...

ANT-2026-SJ7ZVBQB · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow medium Severity Claude high · Security research firm medium · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-SJ7ZVBQB: Heap-buffer-overflow in mpeg.h:70 While...

ANT-2026-NGTJ413W · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-NGTJ413W: This is a genuine heap-buffer-overflow...

ANT-2026-0Y1VS937 · ffmpeg · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-0Y1VS937: Heap underflow in H.264 xchgmbborder via slicenum/sentinel collision In FFmpeg's H.264 decoder, slicetable h264dec.h is a...

ANT-2026-0GNNMNPS · wabt · Heap-buffer-overflow

heap-buffer-overflow critical Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-0GNNMNPS: Heap-buffer-overflow in wabt Wh...