PT-2026-70248

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0846 Description The set sofo function in src/spellfile.c reuses the sl sal first array without resetting values previously set by set sal first. A specially crafted spell file containing an SN SAL section before an S...

PT-2026-70457

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A heap-based buffer overflow occurs in the Windows MIDI Service Module. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-70507

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Device Association Service. This issue allows an authorized attacker to elevate privileges locally on the system....

PT-2026-70685

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A heap-based buffer overflow occurs in Windows Message Queuing, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-70744

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happe...

PT-2026-70548

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Client, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S25 devices. User interaction may be required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2026-70482

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A heap-based buffer overflow occurs in Windows Message Queuing, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

ImageMagick < 6.9.13-51 / 7.x < 7.1.2-26 Heap Buffer Over-write (CVE-2026-62343)

The remote host has a version of ImageMagick installed that is prior to 6.9.13-51 or 7.x prior to 7.1.2-26. It is, therefore, affected by a heap buffer over-write vulnerability: - An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5555893120073728 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x76619133257c Crash...

CVE-2026-11809 UpdateHub probe: uninitialized-heap out-of-bounds read of network-supplied metadata

The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in zimplupdatehubprobe. The probe response from the UpdateHub server is copied into a heap buffer metadata that is correctly NUL-terminated, but a second buffer metadatacopy is...

postgis:gserialized_from_bytea_fuzzer: Heap-buffer-overflow in gserialized2_validate_nurbs

Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed Report: https://oss-fuzz.com/testcase?key=5123821921959936 Project: postgis Fuzzing Engine: libFuzzer Fuzz Target: gserializedfrombyteafuzzer Job Type: libfuzzerasanpostgis Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

ogre:script_fuzz: Heap-buffer-overflow in Ogre::ScriptParser::parse

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=4932602193313792 Project: ogre Fuzzing Engine: honggfuzz Fuzz Target: scriptfuzz Job Type: honggfuzzasanogre Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x74a4903e3098...

SUSE-SU-2026:3562-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-27951: 32-bit system denial of service via endless blocking loop in StreamEnsureCapacity bsc1258939. - CVE-2026-33952: client denial of service via unvalidated authentication length field bsc1261196. - CVE-2026-33977: client denial of...

Security update for perl

This update for perl fixes the following issues: CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds bsc1266304. CVE-2026-12087: Socket's packipmreqsource can copy adjacent heap memory into the returned packed structure bsc1268349...

SUSE-SU-2026:3558-1 Security update for perl

This update for perl fixes the following issues: - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds bsc1266304. - CVE-2026-12087: Socket's packipmreqsource can copy adjacent heap memory into the returned packed structure...

OPENSUSE-SU-2026:21544-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path bsc1271419. - CVE-2026-59197: heap out-of-bounds write in ImageFilter.RankFilter via integer overflow in ImagingExpand bsc1271418. - CVE-2026-59198:...

SUSE-SU-2026:3552-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer bsc1272752. - CVE-2026-66039: MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File bsc1272765...

SUSE CVE-2026-18497

A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnerability exists in the stbttGetGlyphShapeTT function within the nothings stbtruetype.h library when parsing malformed TTF TrueType Font file...

OPENSUSE-SU-2026:21549-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-58050: heap buffer...