CVE-2026-112260

A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service. Mitigation Avoid opening untrusted XCF files in GIMP. If GIMP is unused, remove the gimp package...

EUVD-2026-104583

Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create function because its class-name checks are case-sensitive while PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administrators, can instantiate SplFileObje...

CVE-2026-98532

A flaw was found in the Linux kernel. A remote attacker could cause a Denial of Service DoS or memory corruption by sending specially crafted IPv6 network packets. The IPv6 extension header parsing mechanism fails to verify that the declared length of a header fits within the received packet data...

CVE-2026-98531

A flaw was found in the Linux kernel's IPv6 Segment Routing SRv6 component. This flaw allows a local user to cause an information disclosure. By sending a crafted Generic Netlink message with an attribute shorter than expected, the system performs an out-of-bounds read into uninitialized kernel...

CVE-2026-19029

A flaw was found in HDF5. When decompressing data using the scale-offset filter, the library fails to verify whether a compressed data chunk is large enough before reading from it. An attacker could exploit this vulnerability by enticing a user or service to process a specially crafted HDF5 file,...

CVE-2026-112282

A flaw was found in libbluray. This vulnerability allows an attacker to cause a Denial of Service DoS through an application crash when processing a specially crafted ClipInfo .clpi file. By supplying a file with an empty entry point map fine table, an out-of-bounds read is triggered during...

CVE-2026-112279

A flaw was found in rdesktop. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending specially crafted bitmap cache orders to a connecting client. Due to insufficient input validation when handling bitmap cache data, the client application can read memory past...

CVE-2026-112278

A flaw was found in rdesktop. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability by sending specially crafted bitmap cache orders specifying large image dimensions alongside an undersized data payload. This causes the client application to read beyond i...

CVE-2026-112276

A flaw was found in the rasttopnm utility of Netpbm. An attacker could exploit this by enticing a user to convert a specially crafted Sun rasterfile image with a truncated color palette, triggering an out-of-bounds memory read. Successful exploitation can lead to a Denial of Service DoS by crashi...

CVE-2026-112271

A flaw was found in libdisplay-info. An out-of-bounds read vulnerability exists in the DisplayID parser when processing data blocks whose declared length exceeds section boundaries. An attacker can exploit this issue by supplying crafted Extended Display Identification Data EDID—such as through a...

CVE-2026-98461

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability can lead to a Denial of Service DoS due to an out-of-bounds memory read. The issue occurs when the Host Controller Interface HCI socket implementation filters event packets without verifying that the packet buffer is...

CVE-2026-98457

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. An adjacent attacker within Bluetooth range could exploit this vulnerability by transmitting specially crafted, undersized network frames. Because the kernel fails to validate packe...

CVE-2026-112277

A flaw was found in rdesktop. A remote malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending malformed compressed bitmap data. By specifying large image dimensions alongside an unexpectedly short compressed payload, the server causes an out-of-bounds read past...

CVE-2026-112272

A flaw was found in libdisplay-info. A local attacker can cause a Denial of Service DoS by providing specially crafted Extended Display Identification Data EDID through a malicious display, video capture device, or file. The DisplayID parser fails to properly validate data block lengths, allowing...

CVE-2026-85522

A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the createSlotImportJob function by manipulating the jobname argument. This can lead to a denial of service, making the affected system unavailable. Mitigation Restrict...

CVE-2026-12669

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-11831

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

GHSA-PCC4-RVHR-2PR8 Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

CVE-2026-11831 IBM MQ Heap-based Buffer Overflow

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...