CVE-2026-94030

CVE-2026-94030 is an integer overflow in the decode_bmp_pixel_data function of BMPLoader.cpp within SerenityOS's LibGfx component. Manipulating the height argument triggers the overflow, and the attack is remote with high complexity . A minimal 55-byte PoC was produced via the standard image-deco...

EUVD-2026-83743

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...