Lucene search
+L

8128 matches found

Vulnrichment
Vulnrichment
•added 2026/03/31 8:32 a.m.•17 views

CVE-2026-5201 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS7.4AI score0.01069EPSS
SaveExploits1References25
attackerkb
attackerkb
•added 2026/03/31 8:32 a.m.•14 views

CVE-2026-5201

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS7.5AI score0.01069EPSS
SaveExploits1References26
Debian CVE
Debian CVE
•added 2026/03/31 8:32 a.m.•11 views

CVE-2026-5201

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS7.4AI score0.01069EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/03/31 8:32 a.m.•12 views

CVE-2026-5201

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS7.4AI score0.01069EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2026/03/31 8:15 a.m.•20 views

CVE-2026-5186

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

5.3CVSS5.3AI score0.00113EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/03/31 7:30 a.m.•31 views

CVE-2026-5186

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

5.3CVSS5.2AI score0.00113EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2026/03/31 7:16 a.m.•30 views

UBUNTU-CVE-2026-5185

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS5.5AI score0.00154EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/03/31 7:16 a.m.•16 views

CVE-2026-5185

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

5.3CVSS5.6AI score0.00154EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/31 6:45 a.m.•75 views

CVE-2026-5185

A security flaw in Nothings stb_image up to 2.30 affects the function stbi__gif_load_next in stb_image.h (Multi-frame GIF File Handler). The issue is a heap-based buffer overflow exploitable with local access. The exploit has been released publicly; vendor was contacted but did not respond. No re...

5.3CVSS5.5AI score0.00154EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2026/03/31 3:15 a.m.•4 views

rs-docs-loader (>=0.0.7, <=0.1.1) potentially affected by CVE-2026-34070 via langchain-core (0.2.0)

langchain-core PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - rs-docs-loader =0.0.7, =0.1.1 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

7.5CVSS7.6AI score0.01382EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2026/03/31 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-5201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color...

7.5CVSS7.4AI score0.01069EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•21 views

gdk-pixbuf security vulnerability

gdk-pixbuf is an open-source image loading library developed by GNOME. gdk-pixbuf has a security vulnerability that stems from the improper validation of color component counts during the processing of specially crafted JPEG images by the JPEG image loader. This can lead to a heap buffer overflow...

7.5CVSS7.5AI score0.01069EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/03/31 12:00 a.m.•25 views

PT-2026-29202

A security flaw has been discovered in Nothings stb image up to 2.30. This affects the function stbi gif load next of the file stb image.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has...

5.3CVSS5.6AI score0.00154EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•25 views

STB resource management error vulnerability

STB is a public domain library for C/C++ developed by Sean Barrett. Versions of STB prior to 2.30 contained a resource management vulnerability, which stemmed from incorrect operations on the stbiloadgifmain function in the stbimage.h file. This vulnerability could lead to double deallocation of...

5.3CVSS5.9AI score0.00113EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•7 views

CVE-2026-5201: Heap-based Buffer Overflow

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS7.5AI score0.01069EPSS
SaveExploits1References34
CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•56 views

STB security vulnerabilities

STB is a publicly available library for C/C++ developed by Sean Barrett. Versions of STB prior to 2.30 contained security vulnerabilities, which stemmed from incorrect operations on the stbigifloadnext function in the stbimage.h file, potentially leading to heap buffer overflows...

5.3CVSS6.1AI score0.00154EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/03/31 12:00 a.m.•16 views

sound module Heap Buffer Overflow DoS

The vulnerability of the clstreamprepare function in the sound module/soc/sof/intel/hda-loader.c, which is related to SoC-based Linux operating system sound support, involves a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00262EPSS
SaveExploits0References17Affected Software3
EUVD
EUVD
•added 2026/03/30 6:31 p.m.•20 views

EUVD-2026-17119

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server...

6.2AI score0.00605EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/03/30 5:27 p.m.•13 views

Directory Traversal

Overview crewai-tools is a Set of tools for the crewAI framework Affected versions of this package are vulnerable to Directory Traversal via the JSON loader tool due to lack of path validation. An attacker can access arbitrary files on the server by supplying crafted file paths. Details A Directo...

8.7CVSS6.2AI score0.00605EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/30 4:16 p.m.•25 views

CVE-2026-2285

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server...

7.5CVSS0.00605EPSS
SaveExploits0References1
Rows per page
Query Builder