SUSE-SU-2026:0115-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. - lscpu: Add support for NVIDIA Olympus arm64 core jscPED-13682...

SUSE-SU-2026:20073-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap buffer over-read in pngwriteimage8bit when processing 8-bit input with convertto8bit enabled...

SUSE-SU-2026:20030-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap buffer over-read in pngwriteimage8bit when processing 8-bit input with convertto8bit enabled...

OPENSUSE-SU-2026:20017-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap buffer over-read in pngwriteimage8bit when processing 8-bit input with convertto8bit enabled...

libpng 输入验证错误漏洞

libpng is The PNG Development Group open source a PNG graphics file can be realized on the creation of PNG, read and write operations such as PNG reference library . An input validation error vulnerability exists in libpng versions 1.6.26 through 1.6.53, which stems from an integer truncation in...

ROS-20260112-7308

A vulnerability in the amdgpudm.c component of the Linux operating system kernel is related to reading outside of the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

PT-2026-2325

Name of the Vulnerable Software and Affected Versions libpng versions 1.6.26 through 1.6.53 Description libpng is a library used by applications to read, create, and manipulate PNG image files. A flaw exists in the png write image 16bit and png write image 8bit functions due to an integer...

libpng 缓冲区错误漏洞

libpng is The PNG Development Group's open source PNG reference library for creating, reading and writing PNG graphics files. A buffer error vulnerability exists in libpng versions 1.6.51 through 1.6.53, which stems from a heap buffer over-read in the pngimagefinishread function...

ROS-20260112-7312

A vulnerability in the qplibfp.c component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7342

Vulnerability in the xlogrecoverprocessdata function in the fs/xfs/xfslogrecover.c module of the xfs file system of the Linux kernel is related to reading memory outside of the allocated buffer Exploitation of the vulnerability could allow an attacker to affect the confidentiality and availabilit...

SUSE SLED15 / SLES15 Security Update : libheif (SUSE-SU-2026:0087-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0087-1 advisory. - CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay...

Security update for libheif

This update for libheif fixes the following issues: CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:0087-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735...

CVE-2022-42411

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2024-41445

Library MDF mdflib v2.1 is vulnerable to a heap-based buffer overread via a crafted mdf4 file is parsed using the ReadData function...

CVE-2022-33297

Information disclosure due to buffer overread in Linux sensors...

CVE-2026-20027

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerabili...

Siemens Ruggedcom ROX Improper Input Validation (CVE-2024-5642)

CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being not...

CVE-2025-15382

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

CVE-2026-20027

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerabili...