CVE-2026-96675: Improper Validation of Array Index

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failur...

CVE-2026-79616: Out-of-bounds Read

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

CVE-2026-88840: Out-of-bounds Read

BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...

CVE-2026-88835: Out-of-bounds Read

BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...

PT-2026-97520

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A one-byte out-of-bounds heap read flaw exists in the uncompressed DDS image loader. When opening an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead...

PT-2026-97430

Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description The get client hello function in BusyBox TLS reads past the end of the input buffer when parsing a truncated ClientHello message. This occurs during the initial handshake process of the TLS...

Linux Distros Unpatched Vulnerability : CVE-2026-89792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto...

PT-2026-97361

Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.2 Description A denial of service issue exists in the multi PCM plugin due to a failure to validate sparse binding indices before array access. An attacker can provide a malicious ALSA configuration file...

PT-2026-105020

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failur...

PT-2026-97360

Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.2 Description An integer overflow occurs in src/topology/ctl.c when computing the combined topology element size using 32-bit arithmetic. This flaw allows bounds checks to be bypassed. By providing crafted...

CVE-2026-96546: Out-of-bounds Read

A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This may cause the plug-in to crash if the byte immediately...

Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

RHEL 9 : qt5-qtbase (RHSA-2026:70560)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70560 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...

RHEL 9 : qt5-qtbase (RHSA-2026:70561)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70561 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...

Oracle Linux 8 : coreutils (ELSA-2026-69964)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69964 advisory. 8.30-21.0.1 - clean up empty file if cp is failed Orabug 15973168 - df --local: recognize afs, auristorfs, and smb3 as remote fs 1798030 - fix formatting of...

CVE-2026-96545: Out-of-bounds Read

An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can copy adjacent heap contents in...

Linux Distros Unpatched Vulnerability : CVE-2026-63279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The...

CVE-2026-95627: Incorrect Permission Assignment for Critical Resource

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...

Linux Distros Unpatched Vulnerability : CVE-2026-89785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: fix out-of-bounds read of INDEXROOT in reparse/objid init ntfsreparseinit and ntfsobjidinit parse the index root of the $Extend/$Reparse and...