EulerOS 2.0 SP10 : util-linux (EulerOS-SA-2026-1326)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the...

EulerOS 2.0 SP11 : util-linux (EulerOS-SA-2026-1596)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the...

EulerOS Virtualization 2.12.1 : libpcap (EulerOS-SA-2026-1436)

According to the versions of the libpcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string...

EulerOS 2.0 SP12 : libpcap (EulerOS-SA-2026-1399)

According to the versions of the libpcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must ...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2026-1548)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2026-1352)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : libpng (EulerOS-SA-2026-1315)

According to the versions of the libpng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From...

EulerOS Virtualization 2.10.1 : libpng (EulerOS-SA-2026-1539)

According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

SUSE SLES12 Security Update : libpng15 (SUSE-SU-2026:0898-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0898-1 advisory. - CVE-2025-64505: heap buffer over-read in 'pngdoquantize' via malformed palette index bsc1254157. Tenable has extracted the preceding description bloc...

Security update for libpng15

This update for libpng15 fixes the following issues: CVE-2025-64505: heap buffer over-read in 'pngdoquantize' via malformed palette index bsc1254157. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...

ImageMagick < 6.9.13-41 / 7.x < 7.1.2-16 Multiple Vulnerabilities

The remote host has a version of ImageMagick installed that is prior to 6.9.13-41 and 7.x prior to 7.1.2-16. It is, therefore, affected by multiple vulnerabilities. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and...

The vulnerability of the OnBeacon() function in the drivers/staging/rtl8723bs/core/rtw_mlme_ext.c module allows unauthorized access to protected information by a remote attacker. This vulnerability enables unauthorized access to sensitive data.

The vulnerability of the OnBeacon function in the drivers/staging/rtl8723bs/core/rtwmlmeext.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthoriz...

AlmaLinux 8 : mingw-libpng (ALSA-2026:4306)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:4306 advisory. libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API CVE-2026-22801 libpng: libpng: Denial of servi...

EUVD-2026-10399

ImageMagick has Heap Buffer Over-Read in BilateralBlurImage...

GHSA-CQW9-W2M7-R2M2 ImageMagick has Heap Buffer Over-Read in BilateralBlurImage

BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds read can occur. ================================================================= ==676172==ERROR: AddressSanitizer:...

ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

A heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of...

mingw-libpng security update

An update is available for mingw-libpng. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MinGW Windows Libpng library. Security Fixes: libpng: libpng: Informatio...

EUVD-2026-11482

yauzl aka Yet Another Unzip Library version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate function. The while loop condition checks cursor data.length + 4 instead of cursor + 4 = data.length, allowing readUInt16LE to rea...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: raptor2 (UTSA-2026-006052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006052 advisory. In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal...

The vulnerability of the library for working with PNG bitmap graphics, related to reading data beyond the buffer’s acceptable limits, allows attackers to access confidential data and cause service failures.

The vulnerability of the library for working with PNG bitmap graphics involves reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service interruptions...