CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

PT-2026-80908

Name of the Vulnerable Software and Affected Versions Netis NC63 versions prior to V3.0.0.3327 Description An issue exists where unauthenticated remote attackers can overwrite the saved stack state by providing an oversized destHost parameter to the ipFilterList=mod action in the 'netis.cgi'...

ROS-20260824-73-0004

The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

EUVD-2026-65145

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

CVE-2026-52492

CVE-2026-52492 affects the libtiff rgb2ycbcr utility. An integer overflow in the cvtRaster() function when computing strip buffer sizes leads to an undersized heap allocation, which can cause a heap-based buffer overflow during YCbCr conversion of a crafted TIFF image, potentially enabling arbitr...

Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the...

Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

PT-2026-80885

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

ALSA-2026:58936 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

PT-2026-80931

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

RHEL 9 : freerdp (RHSA-2026:58710)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58710 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

MiracleLinux 9 : freerdp-2.11.7-7.el9_8.5 (AXSA:2026-1629:26)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1629:26 advisory. FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files CVE-2026-64624 FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async...

ALSA-2026:59179 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

The vulnerability of the internal_piz.c component of the image storage software for OpenEXR, which has a wide dynamic range of brightness levels, allows a hacker to cause a service failure.

The vulnerability of the internalpiz.c component in the image storage software for OpenEXR, which supports a wide dynamic range of brightness values, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Linux operating system’s kernel, related to the operation of operations beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the `CompositeDeepScanLine::readPixels` function in the ImfCompositeDeepScanLine component of image storage software for OpenEXR images with a wide dynamic range of brightness levels allows a hacker to cause a service failure.

The vulnerability of the CompositeDeepScanLine::readPixels function in the ImfCompositeDeepScanLine component of software for storing images with a wide dynamic range of brightness, OpenEXR, is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the dlm_search_rsb_tree() function in the fs/dlm/lock.c module of the Dlm subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dlmsearchrsbtree function in the fs/dlm/lock.c module of the Dlm subsystem of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacke...

The vulnerability of the plug-in/common/file-psp.c component of the GIMP graphic editor allows a hacker to trigger a service failure.

The vulnerability of the plug-in/common/file-psp.c component of the GIMP graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PSP image...

The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, which allows a hacker to trigger a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...