CVE-2026-112279

A flaw was found in rdesktop. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending specially crafted bitmap cache orders to a connecting client. Due to insufficient input validation when handling bitmap cache data, the client application can read memory past...

CVE-2026-112278

A flaw was found in rdesktop. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability by sending specially crafted bitmap cache orders specifying large image dimensions alongside an undersized data payload. This causes the client application to read beyond i...

CVE-2026-112276

A flaw was found in the rasttopnm utility of Netpbm. An attacker could exploit this by enticing a user to convert a specially crafted Sun rasterfile image with a truncated color palette, triggering an out-of-bounds memory read. Successful exploitation can lead to a Denial of Service DoS by crashi...

CVE-2026-112271

A flaw was found in libdisplay-info. An out-of-bounds read vulnerability exists in the DisplayID parser when processing data blocks whose declared length exceeds section boundaries. An attacker can exploit this issue by supplying crafted Extended Display Identification Data EDID—such as through a...

CVE-2026-98461

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability can lead to a Denial of Service DoS due to an out-of-bounds memory read. The issue occurs when the Host Controller Interface HCI socket implementation filters event packets without verifying that the packet buffer is...

CVE-2026-98457

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. An adjacent attacker within Bluetooth range could exploit this vulnerability by transmitting specially crafted, undersized network frames. Because the kernel fails to validate packe...

CVE-2026-112277

A flaw was found in rdesktop. A remote malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending malformed compressed bitmap data. By specifying large image dimensions alongside an unexpectedly short compressed payload, the server causes an out-of-bounds read past...

CVE-2026-112272

A flaw was found in libdisplay-info. A local attacker can cause a Denial of Service DoS by providing specially crafted Extended Display Identification Data EDID through a malicious display, video capture device, or file. The DisplayID parser fails to properly validate data block lengths, allowing...

CVE-2026-85522

A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the createSlotImportJob function by manipulating the jobname argument. This can lead to a denial of service, making the affected system unavailable. Mitigation Restrict...

CVE-2026-12669

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-11831

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

CVE-2026-11831

IBM MQ is vulnerable to a heap-based buffer overflow (CWE-122) occurring during the processing of a specially crafted client request. An authenticated attacker can leverage this out-of-bounds read to cause a limited denial of service and gain very limited information regarding the process memory ...

EUVD-2026-104471

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

CVE-2026-11831 IBM MQ Heap-based Buffer Overflow

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

CVE-2026-12669 IBM MQ Out-of-bounds Read

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

EUVD-2026-104464

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-12669

IBM MQ and IBM MQ Operator are affected by an out-of-bounds read vulnerability. An authenticated attacker can trigger this minor error by sending malformed compressed data . While the request is ultimately rejected, the underlying cause is a buffer error during data processing. The affected IBM M...

CVE-2026-107187 Eptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive Tables

A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations ma...

CVE-2026-107187

The Eptura Archibus platform is vulnerable to an unauthenticated database read via the AbCommonResources-getDataRecords workflow rule. An attacker can chain this with an authentication bypass in the isPasswordUppercase method to execute DWR requests without valid credentials. This allows unauthor...