118673 matches found
CVE-2026-62291
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...
PT-2026-79259
Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...
UBUNTU-CVE-2026-62291
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...
Linux Distros Unpatched Vulnerability : CVE-2026-63652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsndserverrecvformats in channels/rdpsnd/server/rdpsndmain.c frees...
PT-2026-79054
jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...
PT-2026-79144
Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description Applications that define unusual custom sources and process untrusted uncompressed PPM images can trigger a max/min error in the vips source read to memory function within libvips/iofuncs/source.c...
PT-2026-79248
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a remote attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer...
PT-2026-79161
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local authenticated attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap...
PT-2026-79143
Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description The old-style Radiance RLE Run-Length Encoding decoder in libvips/foreign/radiance.c contains a flaw where it can process a repeat marker at the start of a scanline in the scanline read old function...
PT-2026-79242
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a remote attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap memory block...
PT-2026-79157
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap memo...
UBUNTU-CVE-2026-75143
FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RI...
UBUNTU-CVE-2026-65609
nnn is vulnerable to Out-of-Bound write vulnerability.Due to lack of v...
CVE-2026-75144
FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerabi...
CVE-2026-75143
FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RI...
Linux Distros Unpatched Vulnerability : CVE-2026-18917
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows...
PT-2026-79003
A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...
CVE-2026-76918 Heap-based Buffer Overflow in Wireshark
SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76918
CVE-2026-76918 is a heap-based buffer overflow in the SSH protocol dissector of Wireshark , affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18 . A local attacker who can convince a user to open a crafted packet capture file or capture traffic from a malicious network can trigger a crash of the Wires...
