CVE-2026-42450

OpenColorIO is a color management framework for visual effects and animation. Prior to version 2.5.2, FileFormatSpi3D.cpp:163 uses sscanf with %s into 64-byte stack buffers when parsing LUT data lines. Input comes from lineBuffer4096, so a crafted .spi3d file can overflow by 4000 bytes on...

CVE-2026-34553

CVE-2026-34553 concerns iccDEV: a defect in LUT dump/iteration logic before version 2.3.1.6 causes a DoS via ICcCLUT::Iterate() and CIccMBB::Describe() (through CLUT dumping). The issue is fixed in version 2.3.1.6. Affected component: iccDEV color management libraries/tools; root cause: flawed LU...

CVE-2026-22993 idpf: Fix RSS LUT NULL ptr issue after soft reset

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed and not restored unless the interface is up. If an ethtool command that accesses the rss lut is attempted immediately after reset, it will...

CVE-2022-50637

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut If "cpudev" fails to get opp table in qcomcpufreqhwreadlut, the program will return, resulting in "table" resource is not released...

The vulnerability of DRM/VKMS components in Linux kernel allows a perpetrator to trigger a service failure.

The vulnerability of DRM/VKMS components in Linux operating systems is related to improper input validation in the function applyluttochannelvalue. Exploiting this vulnerability can allow an attacker to trigger a service failure...

DEBIAN-CVE-2023-52649

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Avoid reading beyond LUT array When the floor LUT index drmfixp2intlutindex is the last index of the array the ceil LUT index will point to an entry beyond the array. Make sure we guard against it and use the value of t...