177707 matches found
CVE-2026-81884
A flaw was found in radare2. A remote attacker could exploit a heap out-of-bounds read vulnerability in the Mach-O LCDATAINCODE parser. This occurs when opening a specially crafted Mach-O file with the non-default bin.verbose option enabled, leading to a read beyond the allocated buffer. This...
CVE-2026-84448
A flaw was found in libheif, a library for decoding and encoding HEIF and AVIF image files. An application that uses the libheif writer API to construct region metadata may be vulnerable to a heap out-of-bounds read. This occurs because the heifregionitemaddregioninlinemaskdata function accepts...
CVE-2026-84451
A flaw was found in libheif. A remote attacker could exploit an integer overflow vulnerability when processing a crafted uncompressed image tile. This overflow leads to an out-of-bounds read, which can cause tile-processing applications to crash, resulting in a denial of service. Mitigation...
CVE-2026-81883
A flaw was found in radare2, a reverse engineering framework. The Lua 5.3 bytecode function parser did not properly validate the length of function-metadata fields after a function-name string. By opening or inspecting a specially crafted Lua 5.3 bytecode file, a local user could trigger an...
CVE-2026-81879
A flaw was found in radare2, a UNIX-like reverse engineering framework. The ELF parser incorrectly handles program-header array allocation and iteration. When processing a specially crafted ELF file, the parser may iterate beyond the allocated program-header array due to a mismatch between the...
CVE-2026-81881
A flaw was found in radare2, a reverse engineering framework. Its Mach-O Swift metadata parser contains a heap out-of-bounds read vulnerability. By processing a specially crafted Mach-O file, a local user could trigger an error that causes the application to terminate. This leads to a denial of...
CVE-2026-95627
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...
DEBIAN-CVE-2026-79616
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
CVE-2026-79616
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
AZL-106830 CVE-2026-79616 affecting package qtdeclarative 6.6.1-2
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
CVE-2026-79616
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
UBUNTU-CVE-2026-79616
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
CVE-2026-79616 Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
CVE-2026-79616 Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
CVE-2026-79616
The Qt Quick framework is vulnerable to an out-of-bounds read occurring while parsing untrusted SVG path strings within the Context2D.path and PathSvg.path components. The vulnerability stems from improper handling of path data during the parsing process. This flaw may result in a high impact on ...
EUVD-2026-85183
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
CVE-2026-79616
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...
EUVD-2026-85181
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...
CVE-2026-95627
A vulnerability in the Tauri framework v2 dialog plugin allows an attacker with JavaScript execution (XSS) to manipulate the file or folder picker. The attacker can force the scope expansion to be recursive , granting unauthorized read/write access to an entire directory tree. This occurs after a...
CVE-2026-95627 Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...