libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_fmt_conv_422sp_to_420p

Project: https://android.googlesource.com/platform/external/libhevc https://github.com/ittiam-systems/libhevc.git Detailed Report: https://oss-fuzz.com/testcase?key=4610459654488064 Project: libhevc Fuzzing Engine: honggfuzz Fuzz Target: hevcdecfuzzer Job Type: honggfuzzasanlibhevc Platform Id:...

Linux Distros Unpatched Vulnerability : CVE-2026-41071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples...

cairo:script_interpreter_fuzzer: Heap-buffer-overflow in csi_object_reference

Detailed Report: https://oss-fuzz.com/testcase?key=6658521386254336 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: scriptinterpreterfuzzer Job Type: libfuzzerasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x77e5c0ae03f0 Crash State: csiobjectreference...

OSV-2026-805 Heap-buffer-overflow in ihevcd_fmt_conv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=515832483 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ihevcdfmtconv ihevcddecode ihevcdcxaapifunction...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_fmt_conv

Project: https://android.googlesource.com/platform/external/libhevc https://github.com/ittiam-systems/libhevc.git Detailed Report: https://oss-fuzz.com/testcase?key=4589567138398208 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform I...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_fmt_conv

Project: https://android.googlesource.com/platform/external/libhevc https://github.com/ittiam-systems/libhevc.git Detailed Report: https://oss-fuzz.com/testcase?key=5805536603078656 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform I...

CVE-2026-41071

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples than actually exist in the track's chunk table causes a heap-buffer-overflow out-of-bounds read in the SampleAuxInfoReader constructor. T...

AZL-88116 CVE-2026-9256 affecting package nginx for versions less than 1.28.3-4

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

cairo:font_fuzzer: Heap-buffer-overflow in find_name

Detailed Report: https://oss-fuzz.com/testcase?key=6060439623761920 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: fontfuzzer Job Type: libfuzzerasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x773cfbde16e4 Crash State: findname cairotruetypereadfontnam...

CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

CVE-2026-9256

NGINX Plus and NGINX Open Source expose a vulnerability in the ngx_http_rewrite_module when a rewrite directive uses distinct, overlapping PCRE captures (e.g., ^/((.*))$) and the replacement references multiple captures (e.g., $1$2) in redirects or arguments. An unauthenticated attacker can send ...

Heap-based Buffer Overflow

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

Heap-based Buffer Overflow

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Heap-based Buffer Overflow

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-41071: Out-of-bounds Read

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples than actually exist in the track's chunk table causes a heap-buffer-overflow out-of-bounds read in the SampleAuxInfoReader constructor. T...

CVE-2026-8997: Heap-based Buffer Overflow

vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file vifminfo.json. This flaw occurs because the application lacks a runtime check on the length of history entries in release builds, potentially allowing a crafted long path or command in the...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (May 2026)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability exists where an attacker could leak held driver locks, potentially leading to denial of service...

Off-by-one Error

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

gdal:s101_fuzzer: Heap-buffer-overflow in DDFSubfieldDefn::GetDataLength

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6679072620216320 Project: gdal Fuzzing Engine: afl Fuzz Target: s101fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x77c5c9ce0f00 Crash State:...