Lucene search
+L

71011 matches found

OSV
OSV
added 2026/08/21 9:17 p.m.6 views

AZL-96986 CVE-2026-77219 affecting package emacs 29.4-4

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

7.1CVSS5.9AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 9:17 p.m.9 views

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

7.1CVSS0.00128EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 9:17 p.m.6 views

DEBIAN-CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

6.9CVSS5.4AI score0.00128EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/21 8:30 p.m.9 views

CVE-2026-18309

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code on affected installations of GIMP. This occurs due to an integer overflow during the parsing of APNG Animated Portable Network Graphics files, caused by a lack of proper validation of user-supplied dat...

7.8CVSS8AI score0.00339EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/21 8:30 p.m.9 views

CVE-2026-18308

A flaw was found in GIMP. This vulnerability allows remote attackers to execute arbitrary code on affected installations. User interaction is required, as the target must open a malicious TIF Tagged Image File Format file or visit a malicious page. The issue stems from improper validation of...

7.8CVSS7.5AI score0.00339EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/21 8:30 p.m.11 views

CVE-2026-18306

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...

7.8CVSS7.8AI score0.00339EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/21 8:30 p.m.9 views

CVE-2026-18305

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

7.8CVSS8AI score0.00359EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/21 8:30 p.m.10 views

CVE-2026-18304

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memor...

7.8CVSS7.9AI score0.00359EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/21 8:23 p.m.10 views

CVE-2026-18301

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the readchanneldata function during PSD Photoshop Document file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the...

7.8CVSS8.1AI score0.00339EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/21 8:23 p.m.9 views

CVE-2026-18300

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

7.8CVSS8.2AI score0.00332EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/21 8:20 p.m.32 views

CVE-2026-77219 GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

7.1CVSS0.00128EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 8:20 p.m.20 views

CVE-2026-77219 GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

6.9CVSS5.6AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/08/21 8:20 p.m.8 views

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

7.1CVSS5.4AI score0.00128EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/21 8:20 p.m.12 views

EUVD-2026-64138

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

7.1CVSS5.5AI score0.00128EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/21 8:20 p.m.27 views

CVE-2026-77219

GNU Emacs before 31.0.91 is affected by an integer overflow in the PBM/PPM/PGM image loader . The loader multiplies image dimensions and channel count using signed integer arithmetic; for sufficiently large values the result wraps to a negative number, bypassing the bounds check and causing the p...

7.1CVSS5.3AI score0.00128EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 7:11 p.m.6 views

CVE-2026-57433

A flaw was found in Storable. This vulnerability allows a remote attacker to cause a denial of service DoS by providing a specially crafted data blob during deserialization. The flaw occurs due to a signed integer overflow when processing an SXHOOK record, leading to a negative count being passed...

9.8CVSS5.3AI score0.00357EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 6:26 p.m.4 views

SUSE-SU-2026:3687-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

7.6CVSS5.7AI score0.00796EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/21 6:26 p.m.3 views

SUSE-SU-2026:3686-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

7.6CVSS5.7AI score0.00796EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/08/21 5:14 p.m.11 views

CVE-2026-70462

A flaw was found in rsync. A remote attacker can exploit a signed integer overflow vulnerability in the I/O timeout implementation by sending specially crafted messages. These messages can disable connection timeouts, causing idle or stalled connections to persist indefinitely. This leads to...

7.1CVSS5.3AI score0.00259EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/21 5:05 p.m.7 views

Security Bulletin: This Power System update is being released to address CVE-2026-16933

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hoste...

8.2CVSS5.7AI score0.00123EPSS
SaveExploits0
Rows per page
Query Builder