18592 matches found
PT-2026-66077
Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
PT-2026-66270
Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...
CVE-2026-62343
CVE-2026-62343 – ImageMagick heap buffer over-write during morphology with a user-supplied invalid kernel. Affected products/versions: ImageMagick before 6.9.13-51 and 7.0.1-0, and before 7.1.2-26. The flaw is triggered during morphology operations using a crafted kernel, leading to a heap buffer...
RLSA-2026:47079 Important: libXfont2 security update
X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 libXfont2: PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...
CVE-2026-67191
Xlight FTP Server prior to 3.9.5 is affected by a pre-authentication heap buffer overflow in the SSH parser. A logic error in the recv loop termination (OR instead of AND) enables exploitation on any SSH or SFTP connection before authentication, allowing remote unauthenticated access with high im...
JLSEC-2026-813 Crafted HTJ2K compressed EXR files can trigger out of bounds reads in OpenEXR
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.11, the HTJ2K High-Throughput JPEG 2000 decoder, htundoimpl in OpenEXRCore is vulnerable to a heap-buffer-overflow READ. The htundoimp...
libXfont2 security update
An update is available for libXfont2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXfont2 runtime library Security Fixes: libXfont2:...
Oracle Linux 8 : libtiff (ELSA-2026-47184)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47184 advisory. 4.0.9-38 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 RHEL-189371 Tenable has extracted the preceding description block...
Oracle Linux 8 : compat-libtiff3 (ELSA-2026-47183)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-47183 advisory. 3.9.4-16 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog ABGR decoding RHEL-189375 Tenable has extracted the preceding description block directly from t...
PT-2026-65953
GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a...
PT-2026-65938
Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description A heap-based buffer overflow exists in the vCardParser class. The issue occurs because the software fails to properly validate a user-supplied string before copying it to a heap-bas...
SUSE-SU-2026:23036-1 Security update for libkrun
This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: selectnextproto use after free in rust-openssl bsc1270429. - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270198. - CVE-2026-41677: openssl: out-of-bound...
Important: Red Hat Security Advisory: gstreamer1-plugins-good security update
An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service
A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...
Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. ...
CVE-2026-14427
A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520113415...
ALSA-2026:47079 Important: libXfont2 security update
X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 libXfont2: PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...
ALSA-2026:47104 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in the DOM: Navigation...
ALSA-2026:47103 Important: libXfont2 security update
X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 libXfont2: PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 libXfont2: computeProps Property Buffer Heap Buffer Overflow CVE-2026-56003 For more details about...