CVE-2026-44034

A heap-based out-of-bounds read vulnerability exists in OFFIS DCMTK 3.7.0 within the DcmRLECodecDecoder::decodeFrame() function located in dcmdata/libsrc/dcrleccd.cc. An attacker can provide a crafted RLE Lossless DICOM file with a pixel data fragment shorter than the 64-byte RLE header, causing ...

CVE-2026-44034 Heap out-of-bounds read in DCMTK RLE decodeFrame()

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

EulerOS 2.0 SP15 : python-pillow (EulerOS-SA-2026-4009)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1...

CVE-2026-44034: Out-of-bounds Read

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

EulerOS 2.0 SP15 : python-pillow (EulerOS-SA-2026-3943)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1...

Rocky Linux 8 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_6005)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266005 advisory. freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path CVE-2026-26965 freerdp: FreeRDP: Arbitrary code execution...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs (ALMALINUX9.6:CLSA-2026:1787058577)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787058577 advisory. - A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table...

EUVD-2026-88556

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-101203

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-101203

A vulnerability exists in FastStone Image Viewer up to version 8.3 . The flaw resides in an unknown function within the 1bpp RLE Decoder component, where manipulation can trigger an out-of-bounds write . This vulnerability can be exploited via a remote attack . No specific remediation or exploit ...

CVE-2026-101203 FastStone Image Viewer 1bpp RLE Decoder out-of-bounds write

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-101203 FastStone Image Viewer 1bpp RLE Decoder out-of-bounds write

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-101203: Out-of-bounds Write

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not...

PT-2026-102383

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer versions prior to 8.4 Description A remote attack can trigger an out-of-bounds write, which occurs when data is written outside the intended memory boundary, within an unknown function of the 1bpp RLE Decoder component...

EulerOS Virtualization 2.12.0 : python-pillow (EulerOS-SA-2026-3665)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds...

CVE-2026-50291 OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

CVE-2026-54626 SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109827 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE...

OPENSUSE-SU-2026:21839-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-66757: Fixed signed integer overflow in file-sgi causes the plugin to crash when RLE-compressed SGI images are processed bsc1279838...

Astra Linux – Vulnerability in GhostScript

A buffer overflow vulnerability was discovered in base/gdevdevn.c:1973 within devnpcxwriterle in ghostscript. This issue may allow a local attacker to cause a denial of service by generating a malicious PDF file for a DEVN device using gs...