libXfont2: PCF Font Parsing Heap Buffer Overflow

A flaw was found in libXfont2. A specially crafted PCF Portable Compiled Format font file, when processed by libXfont2, can lead to a buffer overflow. This occurs because the font parsing process does not properly validate the size of a bitmap buffer against the glyph metrics provided in the...

libXfont2: PCF Font Parsing Heap Buffer Overflow

A flaw was found in libXfont2. A specially crafted PCF Portable Compiled Format font file, when processed by libXfont2, can lead to a buffer overflow. This occurs because the font parsing process does not properly validate the size of a bitmap buffer against the glyph metrics provided in the...

libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

A flaw was found in libXfont2. In the BitmapScaleBitmaps function, an integer overflow can occur when calculating the memory needed for font glyphs. This overflow leads to a heap buffer overflow, where a smaller-than-required memory buffer is allocated. A local attacker can exploit this by loadin...

libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties

A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...

libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties

A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...

SUSE-SU-2026:23128-1 Security update for libXfont2

This update for libXfont2 fixes the following issues: - CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. - CVE-2026-59679: fsreadglyphs heap OOB read/write via encoding array index mismatch bsc1272660...

SUSE-SU-2026:23151-1 Security update for libXfont2

This update for libXfont2 fixes the following issues: - CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. - CVE-2026-59679: fsreadglyphs heap OOB read/write via encoding array index mismatch bsc1272660...

CVE-2026-67873

A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegmentencode validates only the standalone segment length via FileSegmentGetMaxDataSize and does not verify the residual capacity of the current ASDU frame befo...

PT-2026-68683

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A heap buffer overflow exists in the CrashReporting component. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox...

PT-2026-68701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A heap buffer overflow exists in the Base component. This occurs when an attacker convinces a user to install a malicious extension, allowing the exploitation of heap corruption throug...

PT-2026-68784

Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.5 through 8.x Description A signed integer overflow exists in the DVB subtitle parser within libavcodec/dvbsub parser.c. An attacker can trigger a heap buffer overflow by providing a specially crafted WTV file. This occurs wh...

RHEL 8 : libXfont2 (RHSA-2026:51066)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:51066 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001...

CVE-2026-43629: Out-of-bounds Write

llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the statereaddata function computes write size without overflow checking, allowing attackers with write access to the slotsavepath directory to corrupt heap memory. Attackers...

CVE-2026-70628: Integer Overflow or Wraparound

FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard...

PT-2026-68522

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.6.0 through 1.6.3 Description A heap-based buffer overflow occurs in the redis client of the Apache Portable Runtime Utility. A heap-based buffer overflow is a memory corruption issue that happens whe...

PT-2026-68728

Name of the Vulnerable Software and Affected Versions llama.cpp versions b4882 through b9058 Description A heap buffer overflow exists in the KV cache state restore path. The state read data function calculates the write size without performing overflow checks. An attacker with write access to th...

ALSA-2026:51295 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: ioam: fix heap buffer overflow in ioam6filltracedata CVE-2026-43186 Bug Fixes and Enhancements: kernel panics caused by NULL pointer dereferences within octeonepvf almalinux-10.2.z...

CVE-2026-19138: Heap-based Buffer Overflow

Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

MiracleLinux 9 : nginx-1.20.1-28.el9_8.4.ML.1 (AXSA:2026-1470:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1470:06 advisory. nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Tenable has extracted t...

chromium -- security fixes

Chrome Releases reports: This update includes 41 security fixes: 499602793 Critical CVE-2026-19137: Use after free in WebGL. 524824288 Critical CVE-2026-19149: Use after free in ura. 532941869 Critical CVE-2026-19154: Use after free in Skia. 534903095 Critical CVE-2026-19157: Out of bounds write ...