PT-2026-107639

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g malloc sizing based on overflowing width height bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow...

PT-2026-107640

A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width height and related arithmetic while the filter’s pixel access path uses the true image size, after integer overflow in the allocation size...

Linux Distros Unpatched Vulnerability : CVE-2026-105839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track...

Linux Distros Unpatched Vulnerability : CVE-2026-106062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's DirectDraw Surface DDS loader. When loading a crafted DDS image, buffer sizes derived from width, height, and...

Linux Distros Unpatched Vulnerability : CVE-2026-106067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width...

Linux Distros Unpatched Vulnerability : CVE-2026-105837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted tra...

Linux Distros Unpatched Vulnerability : CVE-2026-106063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates ...

Linux Distros Unpatched Vulnerability : CVE-2026-106064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computin...

Linux Distros Unpatched Vulnerability : CVE-2026-106061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width heig...

Linux Distros Unpatched Vulnerability : CVE-2026-106567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger a...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : U-Boot vulnerabilities (USN-8884-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8884-1 advisory. Timo Preil discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An...

Linux Distros Unpatched Vulnerability : CVE-2026-106574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel...

Linux Distros Unpatched Vulnerability : CVE-2026-106066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's raw data export plug-in. When exporting very large images, gmalloc sizing based on overflowing width height...

Linux Distros Unpatched Vulnerability : CVE-2026-106571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the...

CVE-2026-75820

GNU Aspell contains an integer truncation vulnerability in the Writabl...

PT-2026-107530

A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL writes using the true image extent, rooted ...

CVE-2026-105837

libmikmod before 3.3.14 contains an integer overflow vulnerability in...

PT-2026-107655

Name of the Vulnerable Software and Affected Versions github.com/xuri/excelize/v2 versions 2.0.0 through 2.11.0 github.com/xuri/excelize versions 1.1.0 through 1.4.1 Description An issue exists where the ColumnNameToNumber function accumulates a bijective base-26 value in an int64 without detecti...

PT-2026-107663

Name of the Vulnerable Software and Affected Versions Excelize versions 2.1.0 through 2.11.0 Description An issue exists when processing Zip64 entries where an uncompressed size with the high bit set ranging from 2^63 through 2^64-1 is converted from a uint64 to a negative int64. This conversion...

Linux Distros Unpatched Vulnerability : CVE-2026-106065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit...