CVE-2013-3664_BMP

Sketchup BMP 材质 RLE4 堆溢出 - CVE-2013-3664 SketchUp 在解析嵌入的 BMP RLE4 压缩纹理时未能正确验证输入。当恶意纹理、缩略图或背景图片触发堆溢出后，已证明可实现任意代码执行。当 Windows 资源管理器读取 .skp 文件中的嵌入缩略图时，同样可能触发此问题。 摘要 标题：Sketchup BMP 材质 RLE4 堆溢出 CVE 编号：CVE-2013-3664 永久链接：http://www.binamuse.com/advisories/BINA-20130521B.txt 公告发布日期：2013-05-23...

CVE-2025-14174-analysis

CVE-2025-14174 分析：ANGLE Metal 暂存缓冲区越界写入 CVE-2025-14174 的技术分析与概念验证 | ---|--- CVE| CVE-2025-14174 严重性| 高 在野利用| 是 - 针对 iOS 26 的有目标攻击 受影响范围| iOS Safari、macOS Chrome/Chromium/Electron（不包括 macOS Safari） 状态| 已在 ANGLE 提交 95a32cb 中修复 致谢| Apple、Google 威胁分析小组 在野利用 据 Apple 称，CVE-2025-14174 在早于 iOS 26 的 iOS...

CVE-2026-91789

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

EUVD-2026-85163

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

CVE-2026-91811 Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

CVE-2026-91811

Foxit PDF Editor/Reader contains a heap-based out-of-bounds write vulnerability within its PRC parser . The vulnerability is caused by insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation of this flaw could lead to memory corruption and an applicatio...

EUVD-2026-85155

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

CVE-2026-91789 Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

CVE-2026-91789

Foxit PDF Editor/Reader contains a vulnerability within its U3D/GIF texture decoding path caused by insufficient validation of image dimensions and related size information. This oversight can lead to an incorrectly sized memory allocation , which may trigger an out-of-bounds write during pixel p...

CVE-2026-91789 Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

CVE-2026-91811: Out-of-bounds Write

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

PT-2026-97208

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The U3D/GIF texture decoding path contains insufficient validation of image dimensions and related size information. This flaw can lead to an integer overflow, resulting in an...

CVE-2026-91789: Out-of-bounds Write

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

Astra Linux – Vulnerability in virglrenderer

A double-free vulnerability exists in the vrendrenderer.c file within virglrenderer up to version 0.8.1. Attackers can exploit this vulnerability to cause a denial of service by triggering texture allocation failures. The reason is that vrendrendererresourceallocatedtexture is not an appropriate...

Astra Linux – Vulnerability in libsdl2

A potential memory leak issue was discovered in the SDL2 library, specifically in the GLESCreateTexture function within the SDLrendergles.c file. This vulnerability allows an attacker to carry out a denial-of-service attack. The vulnerability affects SDL2 version 2.0.4 and later versions. SDL-1.x...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: virglrenderer (UTSA-2026-093023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093023 advisory. A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure,...

JLSEC-2026-1052 ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing...

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is not released when GetTypeMetrics fails, leaking memory each time a crafted TXT file with a texture attribute is process...

PT-2026-76092

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is not released when GetTypeMetrics fails, leaking memory each time a crafted TXT file with a texture attribute is process...

CVE-2026-43780

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted texture may lead to unexpected app termination...

CVE-2026-43780

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted texture may lead to unexpected app termination...