TencentOS Server 2: gdk-pixbuf2 (TSSA-2026:1038)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1038 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Astra Linux – Vulnerability in Blender

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption, or potentially code execution...

Important: emacs

Issue Overview: GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel...

Security update for emacs

This update for emacs fixes the following issues: Arbitrary code execution when opening a specially crafted file bsc1275941. CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color ind...

SUSE-SU-2026:4083-1 Security update for emacs

This update for emacs fixes the following issues: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color...

PT-2026-89116

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description Crafted grid, iovl, and iden reference graphs can cause the same base image to be decoded repeatedly. This occurs because processed ids is copied per branch and the decode image function in ImageIte...

OPENSUSE-SU-2026:11719-1 gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for emacs

This update for emacs fixes the following issues: code execution upon opening arbitrary file bsc1275941. CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader bsc1276264. CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927. Patch Instructions: To install this SUSE updat...

SUSE-SU-2026:3993-1 Security update for emacs

This update for emacs fixes the following issues: - code execution upon opening arbitrary file bsc1275941. - CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader bsc1276264. - CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927...

PT-2026-89118

Name of the Vulnerable Software and Affected Versions libheif versions 1.19.0 through 1.23.2 Description A crafted image item containing a clap property and an ispe width or height greater than INT32 MAX + 1 can reach crop calculations through the heif image handle get image tiling function. The...

openSUSE 16: emacs / emacs-el / emacs-eln / emacs-games / emacs-info / emacs-nox / etc (openSUSE-SU-2026:21711-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21711-1 advisory. Security issues fixed: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the...

Security update for emacs (important)

openSUSE security update: security update for emacs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21711-1 Rating: important References: bsc1271643 bsc1275927 bsc1275941 bsc1276264 Cross-References: CVE-2026-77219 CVE-2026-79992 CVSS scores:...

SUSE-SU-2026:23589-1 Security update for emacs

This update for emacs fixes the following issues: Security issues fixed: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions an...

OPENSUSE-SU-2026:21711-1 Security update for emacs

This update for emacs fixes the following issues: Security issues fixed: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions an...

Fedora 44 : emacs (2026-60eff202e7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-60eff202e7 advisory. Fix CVE-2026-77219: Integer overflow in PBM/PPM/PGM image loader. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2026-77219

A flaw was found in GNU Emacs. An integer overflow in the PBM/PPM/PGM image loader allows a remote attacker to leak heap memory contents. By supplying a specially crafted image with large dimensions and an elevated maximum color index, the image loader's internal calculations can wrap to a negati...

SUSE CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

PT-2026-89112

Name of the Vulnerable Software and Affected Versions libheif versions 1.22.0 through 1.23.1 sharp versions prior to 0.35.4 next.js versions prior to 15.5.24 next.js versions prior to 16.3.3 ImageMagick affected versions not specified Description A heap out-of-bounds write exists in the HEIF and...

Linux Distros Unpatched Vulnerability : CVE-2026-77219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafte...

AZL-96986 CVE-2026-77219 affecting package emacs for versions less than 29.4-6

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...