EulerOS 2.0 SP11 : libpng (EulerOS-SA-2026-1611)

According to the versions of the libpng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to...

EulerOS Virtualization 2.12.1 : libpng (EulerOS-SA-2026-1437)

According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

SUSE-SU-2026:0898-1 Security update for libpng15

This update for libpng15 fixes the following issues: - CVE-2025-64505: heap buffer over-read in 'pngdoquantize' via malformed palette index bsc1254157...

ImageMagick has Heap Buffer Over-Read in BilateralBlurImage

BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds read can occur. ================================================================= ==676172==ERROR: AddressSanitizer:...

RLSA-2026:4306 Important: mingw-libpng security update

MinGW Windows Libpng library. Security Fixes: libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API CVE-2026-22801 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in pngimagefinishread CVE-2026-22695...

SUSE CVE-2026-30935

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds rea...

libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

A flaw was found in libpng, a reference library for PNG Portable Network Graphics raster image files. An integer truncation vulnerability exists in the pngwriteimage16bit and pngwriteimage8bit simplified write API functions. A local attacker could exploit this flaw by providing a negative row...

The vulnerability of the hci_devcd_dump() function in the net/bluetooth/coredump.c module of the Linux operating system’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcidevcddump function in the net/bluetooth/coredump.c module of the Linux operating system’s Bluetooth subsystem is related to buffer out-of-buffer reading. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

EUVD-2026-10388

ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder...

CVE-2026-28692

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in BilateralBlurImage. An attacker can cause a heap-based buffer over-read. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - Red Hat Bugzilla Bug Credit: Hao Ren...

CVE-2026-3631

Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability...

CVE-2026-3631

Delta Electronics COMMGR2 is affected by a Buffer Over-read DoS vulnerability. The CVE-2026-3631 vulnerability can be triggered remotely over the network (attack vector: NETWORK, complexity: LOW, privileges required: NONE, user interaction: NONE). Based on the metric, the exploit would impact ava...

OESA-2026-1502 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

RockyLinux 10 : libpng (RLSA-2026:3551)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:3551 advisory. libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API CVE-2026-22801 libpng: libpng: Denial of...

libpng security update

An update is available for libpng. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpng packages contain a library of functions for creating and...

Important: Red Hat Security Advisory: libpng security update

An update for libpng is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-28364

A flaw was found in OCaml. A remote attacker could exploit a buffer over-read vulnerability during Marshal deserialization by providing specially crafted data. This issue stems from missing bounds validation in the readblock function, which performs unbounded memory copy operations. Successful...

RHEL 9 : libpng (RHSA-2026:3405)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3405 advisory. The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics PNG image format files. Security...

SUSE CVE-2026-27798

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability occurs when processing an image with small dimension using the -wavelet-denoise operator. Versions 7.1.2-15 and 6.9.13-40...