CVE-2026-55192

In FreeRDP prior to 3.27.0, H.264 decoder backends return YUV planes sized from the bitstream without comparing decoded dimensions to the RDPGFX surface size. A malicious RDP server can supply a smaller AVC420/AVC444 frame, causing out-of-bounds reads in yuv420_context_decode/avc420_yuv_to_rgb pa...

CVE-2026-55192 FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP serve...

EUVD-2026-62668

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP serve...

CVE-2026-55192

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP serve...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the cgltfvalidate process. An attacker can trigger memory disclosure and application crash by supplying a crafted .gltf or .glb file with specially crafted accessor count values that cause an unsigned...

CVE-2026-75148

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

CVE-2026-75148 cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

CVE-2026-75148

cgltf through 1.15 is affected by an integer overflow in the non-sparse accessor bounds check within cgltf_validate() . A crafted accessor count value in a malformed .gltf or .glb file overflows the unsigned integer multiplication of accessor stride and element count, causing the bounds check to ...

EUVD-2026-62431

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

CVE-2026-75148 cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

CVE-2026-75148 cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

BIT-POSTGRESQL-2026-18024 PostgreSQL ascii() function reads past end of buffer

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.6, 17.11, 16.1...

BIT-POSTGRESQL-2026-14678 PostgreSQL pg_trgm picksplit reads past end of buffer

Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

PT-2026-78596

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An out-of-bounds read allows a remote attacker to disclose kernel memory. An out-of-bounds read occurs when a program reads data past the end of the intended buffer,...

CVE-2026-16833: Out-of-bounds Read

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read...

Linux Distros Unpatched Vulnerability : CVE-2026-65832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP value...

PT-2026-78560

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0 Description In the libfreerdp/codec/planar.c file, the functions planar decompress plane rle and planar decompress plane rle only verify the existence of a control byte but fail to confirm if the source buffer...

CVE-2026-75148: Integer Overflow or Wraparound

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

PT-2026-78369

Name of the Vulnerable Software and Affected Versions cgltf versions prior to 1.16 Description An integer overflow exists in the non-sparse accessor bounds check within the cgltf validate function. A remote attacker can exploit this by providing malformed .gltf or .glb files with specially crafte...