Grigory Chudov’s buffer error vulnerability

Grigory Chudov’s libtta versions 2.3 and earlier have a buffer error vulnerability. This vulnerability arises from the lack of header checks that reject zero audio channels. An attacker can create a specially crafted .tta file that declares zero audio channels, causing the application to access...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the gpiodesctolineinfo function, which returns early when attempting to retrieve GPIO chip protection information, and does not clear the info structure. This may lead to the leakage of kernel stack...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.11.7 to 6.12 and version 6.12 contain security vulnerabilities. These vulnerabilities arise when the TPM empty key name does not match, resulting in the chip not being disabled and a success return being given. This allows uninitialized stack values to be used as...

SUSE CVE-2026-93164

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Move optimized uprobe from nop5 to nop10 Andrii reported an issue with optimized uprobes 1 that can clobber redzone area with call instruction storing return address on stack where user code may keep temporary data...

Exploit for CVE-2026-99999

cve-2026-99999-audit !CVEhttps://img.shields.io/badge/CVE-...

MGASA-2026-0515 Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

Updated nodejs-braces package fixes a security vulnerability

It was discovered that braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards CVE-2026-93687...

Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

MGASA-2026-0518 Updated nodejs-braces package fixes a security vulnerability

It was discovered that braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards CVE-2026-93687...

Linux Distros Unpatched Vulnerability : CVE-2026-111678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets ar...

Linux Distros Unpatched Vulnerability : CVE-2026-111275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nifticlib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifticonvertn2hdr2nim because the NIfTI-2 dim0 value is never...

Linux Distros Unpatched Vulnerability : CVE-2026-110604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML...

Linux Distros Unpatched Vulnerability : CVE-2026-110606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreCAD libdxfrw through LC2.2.0 LibreCAD through 2.2.1.5 contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader caused by...

Linux Distros Unpatched Vulnerability : CVE-2026-100354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an...

Linux Distros Unpatched Vulnerability : CVE-2026-110661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFIreadnodeheader that allows attackers to crash applications by supplying crafted ADF...

SUSE CVE-2026-92391

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...

CVE-2026-111275

A flaw was found in nifticlib. This vulnerability can result in a Denial of Service DoS or memory corruption when an application processes a specially crafted NIfTI-2 image file. Due to missing range validation on dimension header values, an attacker could supply a malicious file that triggers a...

CVE-2026-100354

A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack...

lopdf has a stack overflow via deeply nested PDF objects

lopdf::Document::loadmem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...

GHSA-6FJ4-RCR3-R7RR lopdf has a stack overflow via deeply nested PDF objects

lopdf::Document::loadmem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...