UBUNTU-CVE-2026-56391

GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w --check-chars option is used. The findfield function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input,...

CVE-2026-56391 Out‑of‑bounds Read in GNU coreutils

GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w --check-chars option is used. The findfield function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input,...

SUSE-SU-2026:22951-1 Security update for nginx

This update for nginx fixes the following issues - CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module bsc1265228. - CVE-2026-42055: heap-based buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules...

The vulnerability of the console-based graphic editor ImageMagick, related to reading data outside of the allowed range in memory, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20260724-73-0035

The vulnerability in ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20260724-73-0036

The vulnerability in ImageMagick 7 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-64426

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description An unsigned integer underflow in the soup filter input stream read until function leads to a heap buffer over-read during the parsing of multipart HTTP responses. A malicious HTTP server can...

PT-2026-64280

Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description An incorrect calculation of buffer size occurs when processing Legacy Advertising Report HCI events. When a single HCI advertising report event bundles multiple reports, the software...

ROS-20260724-73-0037

The vulnerability in ImageMagick 7 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: net: sched: act_csum: validate nested VLAN headers

A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...

K000162393: PostgreSQL vulnerability CVE-2026-6575

Security Advisory Description Buffer over-read in PostgreSQL function pgrestoreattributestats accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18,...

ROS-20260723-73-0021

The vulnerability in Chromium is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260723-73-0024

The vulnerability in Chromium is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the imx_pinconf_set_scu() function in the drivers/pinctrl/freescale/pinctrl-scu.c driver for Linux kernel’s PINCTRL output control functions allows a hacker to cause a service failure.

The vulnerability of the imxpinconfsetscu function in the drivers/pinctrl/freescale/pinctrl-scu.c driver for the LINUX operating system’s GPIO controller is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260723-73-0061

The vulnerability in Chromium is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260723-73-0062

The vulnerability in Chromium is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260723-73-0056

The vulnerability in Chromium is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260723-73-0047

The vulnerability in Chromium is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-47773

The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in...

SUSE CVE-2026-12548

A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soupheadersparse can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to cras...