Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: corrected incorrect allocation size gcc-14 notes that the allocation using sizeofvoid on 32-bit architectures is insufficient for a 64-bit physaddrt: drivers/firmware/efi/capsule-loader.c: In the function...

Astra Linux – Vulnerability in Chromium

Incorrect reference resolution in the Loader component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass web origin policies through crafted network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 96.0.4664.45, using free after loading in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/spufs: Fixed a refcount leak in spufsinitisolatedloader. The function offindnodebypath returns a nodepointer for a remote device, with the refcount incremented. We should use ofnodeput on it after processing. Add...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hexadecimal numbers or similar elements. However,...

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. A properly crafted image file can trigger an attempt by stbiloadgifmainoutofmem to double-free the out variable. This occurs in stbiloadgifmain, because when the layers stride value is zero, the behavior is...

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. The stbigetn function reads a specified number of bytes from the context usually a file into the specified buffer. If the file stream points to the end of the file, it returns zero. There are two places where...

Astra Linux – Vulnerability in libstb

A issue was discovered in stbstbimage.h versions 1.33 to 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length data. An attacker could potentially cause a denial of service in applications that use stbimage by submitting crafted HDR files...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Loader component of Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Loader component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Low...

gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...

PT-2026-106245

Name of the Vulnerable Software and Affected Versions Docling versions 2.95.0 through 2.131.0 Description The HTML image resource loader in docling/backend/utils/image resource loader.py forwards headers configured via the HTMLBackendOptions.headers setting to every remote image URL specified by ...

MAL-2026-17507 Malicious code in hardhat-jsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ac44be2745338b73861690e7f979216fdfc6c3797dfa2f450e9063aa4158d1 The package is published as 'hardhat-jsx' but its metadata, documentation, and lib/ layout impersonate the pino logger keywords...

Malicious code in hardhat-jsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ac44be2745338b73861690e7f979216fdfc6c3797dfa2f450e9063aa4158d1 The package is published as 'hardhat-jsx' but its metadata, documentation, and lib/ layout impersonate the pino logger keywords...

MAL-2026-17511 Malicious code in lite-mater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532663c4102d3cf7310e29ca1eb2b389c5c32c1e541da219b7c4364968f4e807 package.json declares a postinstall lifecycle hook wscript.exe 4444.vbs that runs automatically on npm install on Windows hosts. The shipped 4444.vbs...

Malicious code in lite-mater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532663c4102d3cf7310e29ca1eb2b389c5c32c1e541da219b7c4364968f4e807 package.json declares a postinstall lifecycle hook wscript.exe 4444.vbs that runs automatically on npm install on Windows hosts. The shipped 4444.vbs...

relapse

PS5 WebKit and Relapse Exploit Supported firmware: 7.00 throug...

freetype: FreeType: Denial of Service via repeated subroutine allocations in CID font loader

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

DEBIAN-CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...