CVE-2026-111171 Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

CVE-2026-111171 Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

CVE-2026-111171

The Web3.py library versions 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The root cause is that the _check_ip_blocked() function fails to unwrap IPv4-mapped IPv6 addresses during CCIP Read URL validation . An attacker can u...

EUVD-2026-102298

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

CVE-2026-111167 GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder

GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acdsprivate that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property...

EUVD-2026-102294

GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acdsprivate that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property...

CVE-2026-111167 GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder

GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acdsprivate that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property...

CVE-2026-111167 GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder

GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acdsprivate that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property...

CVE-2026-111167

GNU LibreDWG versions through 0.14.8612 are vulnerable to a global out-of-bounds read in the AcDs decoder 's acds_private() function. The root cause is an unchecked schema property type index , which allows an attacker to read beyond a static table. By supplying a crafted R2004 or R2010+ DWG file...

CVE-2026-111167

GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acdsprivate that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property...

CVE-2026-111166

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

CVE-2026-111166 libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

CVE-2026-111166 libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

CVE-2026-111166

The libmikmod library, versions through 3.3.15 , is vulnerable to a heap out-of-bounds read in the IMF_Load() loader. An attacker can trigger this by providing a crafted IMF module that enables the linear-period header flag while mapping notes to out-of-range samples. This causes the noteindex to...

EUVD-2026-102293

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

CVE-2026-111166 libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

CVE-2026-111166

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

CVE-2026-111164 UADE through 3.05 Out-of-Bounds Read in uade_filemagic via Short Module

UADE through 3.05 contains an out-of-bounds read vulnerability in uadefilemagic in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing application...

CVE-2026-111165 libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count

libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTMLoad because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices and...

CVE-2026-111164

UADE through 3.05 contains an out-of-bounds read vulnerability in uadefilemagic in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing application...