PT-2026-115171

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.16 Description An out-of-bounds read occurs in the MultiTracker loader MTM Load function because the module channel count is not clamped. A remote attacker can provide a specially crafted .mtm file with a channe...

PT-2026-115318

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption occurs in the SVG component, which allows a remote attacker to read memory by inducing the user to visit a specially crafted HTML page. Recommendations Update Google...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-130352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130352 advisory. libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing ...

Linux Distros Unpatched Vulnerability : CVE-2026-106435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression...

PT-2026-115130

Name of the Vulnerable Software and Affected Versions CFITSIO versions prior to 4.7.1 Description A heap-based out-of-bounds read exists in the unquantize helpers within imcompress.c. This occurs when a zero or negative ZDITHER0 seed is used, allowing memory to be read before the fits rand value...

UBUNTU-CVE-2026-110598

Libyal libpff through 20260926 contains an integer underflow in libpffrecordentrygetmultivalue that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PTMVSTRING8, PTMVUNICODE or PTMVBINARY offsets ...

UBUNTU-CVE-2026-110597

Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute bounds...

UBUNTU-CVE-2026-110656

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check after advancing past ':'. A malicious or spoofed UPnP gateway on the local network can send a device description or SOAP...

PT-2026-114417

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper model load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local...

PT-2026-114755

Name of the Vulnerable Software and Affected Versions DragonFly BSD versions prior to 6.6 Description The ARP input handlers arpintr and in arpinput in sys/netinet/if ether.c fail to validate the hardware address length ar hln and protocol address length ar pln fields of incoming ARP packets...

PT-2026-114926

Name of the Vulnerable Software and Affected Versions Enterprise Architect version 17.1 Description The XSLT Debugger feature allows XML External Entity XXE injection. This occurs when the parser processes a crafted XML file containing a DOCTYPE with an external DTD reference, enabling an attacke...

PT-2026-114873

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

PT-2026-114879

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...

PT-2026-114814

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

PT-2026-114765

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...

CVE-2026-110810

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whispermodelload of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position...

PT-2026-115138

Name of the Vulnerable Software and Affected Versions GNOME libgxps versions 0.3.2 and earlier Description A heap out-of-bounds read exists in the path geometry start element function. This occurs when a crafted XPS document contains PolyBezierSegment or PolyQuadraticBezierSegment Points attribut...

PT-2026-115170

UADE through 3.05 contains an out-of-bounds read vulnerability in uade filemagic in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing applicatio...

PT-2026-115261

Name of the Vulnerable Software and Affected Versions libical versions prior to 4.0.7 Description A heap-based out-of-bounds read occurs in the icalvalue decode ical string function within src/libical/icalvalue.c when decoding input that ends with a backslash. An attacker can provide escaped...

PT-2026-115302

Name of the Vulnerable Software and Affected Versions CRMEB versions 5.6.1 through 6.0.0 Description An insecure direct object reference issue allows authenticated storefront users to access and claim orders belonging to other users. By enumerating sequential order IDs within the gift detail...