CVE-2026-109255

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in licensecheckstreamlength that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVERLICENSEREQUEST with a large scopeCount that bypasses length checks, causi...

CVE-2026-109255 FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in licensecheckstreamlength that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVERLICENSEREQUEST with a large scopeCount that bypasses length checks, causi...

EUVD-2026-97694

FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collectkeys that allows local attackers to write past the fixed 64-entry keys array during PKCS11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots ...

CVE-2026-109250

FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collectkeys that allows local attackers to write past the fixed 64-entry keys array during PKCS11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots ...

CVE-2026-109250 FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()

FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collectkeys that allows local attackers to write past the fixed 64-entry keys array during PKCS11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots ...

CVE-2026-109250

FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collectkeys that allows local attackers to write past the fixed 64-entry keys array during PKCS11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots ...

CVE-2026-109250

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to a heap buffer overflow within the collect_keys() function during PKCS#11 key enumeration. A local attacker who controls smartcard tokens can trigger the overflow by presenting more than 64 public key objects across multiple slots. This allows...

CVE-2026-109250 FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()

FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collectkeys that allows local attackers to write past the fixed 64-entry keys array during PKCS11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots ...

SUSE-SU-2026:4631-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. - CVE-2026-102556:...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. CVE-2026-102556: Heap...

OPENSUSE-SU-2026:22090-1 Security update for iperf

This update for iperf fixes the following issues: - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion bsc1284405. - CVE-2026-71218: unbounded peer-controlled allocation in JSONread allows unauthenticated remot...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch releases of Callhome. Vulnerability Details CVEID:CVE-2026-11824 DESCRIPTION: SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search...

OPENSUSE-SU-2026:22085-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. - CVE-2026-93517: GLX...

SUSE-SU-2026:24230-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. - CVE-2026-93517: GLX...

Security update for unbound

This update for unbound fixes the following issues: CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. CVE-2026-77955: Possible ZONEMD verification bypass window bsc1280404. CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission bsc1280405...

SUSE-SU-2026:4624-1 Security update for unbound

This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass window bsc1280404. - CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission...

Security update for unbound

This update for unbound fixes the following issues: CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. CVE-2026-77955: Possible ZONEMD verification bypass window bsc1280404. CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission bsc1280405...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. CVE-2026-102556: Heap...

SUSE-SU-2026:4616-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. - CVE-2026-102556:...

openssl: heap buffer overflow in CMS key unwrapping

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...