PT-2026-64709

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA aoa component, the snd ctl new1 function can return NULL during memory allocation failures. In layout.c, the system fails to verify this return value before dereferencing...

PT-2026-64710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA ymfpci component. The function snd ymfpci create spdif controls fails to verify the return value of snd ctl new1, which can return NULL duri...

PT-2026-64518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the decompression module where the return value of the module extend max pages function is not checked. This function internally calls kvrealloc and returns -ENOMEM up...

Linux Distros Unpatched Vulnerability : CVE-2026-64482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before...

Linux Distros Unpatched Vulnerability : CVE-2026-64484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: es1938: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndes1938mixer does not check the return value before...

PT-2026-64701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ice1712 driver in the Advanced Linux Sound Architecture ALSA fails to verify the return value of the snd ctl new1 function. When memory allocation fails, snd ctl new1 returns NULL;...

PT-2026-64634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ebtables table translation where a sparse cpu possible mask can lead to an uninitialized pointer free. If the cpu possible mask is sparse, the allocation...

PT-2026-64705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA es1938 component, the function snd es1938 mixer fails to verify the return value of snd ctl new1. If memory allocation fails, snd ctl new1 returns NULL, and the subsequent...

DEBIAN-CVE-2026-66036

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vfhqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the...

DEBIAN-CVE-2026-66037

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...

CVE-2026-66037

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...

CVE-2026-66037 FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted countlabel field. The mixpresentationob...

CVE-2026-66037

FFmpeg

CVE-2026-64234 tty: serial: pch_uart: add check for dma_alloc_coherent()

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...

ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails

When a memory allocation fails inside the FormatMagickCaption method a dangling pointer still points to the freed memory...

GHSA-QVXH-PRVR-85W2 ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails

When a memory allocation fails inside the FormatMagickCaption method a dangling pointer still points to the freed memory...

GHSA-RVHP-75F6-9JQH ImageMagick: Policy Bypass possible with matrix-backed operations

Matrix bases operations like -canny are missing a check for allowed memory allocation that could result allocating more memory than allowed...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

OESA-2026-3137 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0,...

OESA-2026-3138 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0,...