416 matches found
EUVD-2026-104660
Pillow: Image.quantize with empty palette leaks uninitialized stack memory...
SUSE CVE-2026-112898
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...
CVE-2026-92520
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When BPF queue and stack pop/peek helpers fail to acquire a lock, they can return without properly initializing the output buffer. This allows a local attacker, by running a specially crafted BPF program, to observe...
DEBIAN-CVE-2026-112898
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...
Linux Distros Unpatched Vulnerability : CVE-2026-112898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette...
CVE-2026-112898
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...
CVE-2026-112898 Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...
CVE-2026-112898
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...
CVE-2026-112898 Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...
CVE-2026-112898
The Pillow Python imaging library (versions 9.1.0 through 12.x.x ) is vulnerable to an information disclosure flaw in the Image.quantize() function. When an empty palette is used, the ImagingPaletteCacheUpdate() function fails to initialize a local cache array, leading the conversion path to emit...
CVE-2026-112898
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...
PT-2026-117685
Name of the Vulnerable Software and Affected Versions Pillow versions 9.1.0 through 12.x Description Pillow can disclose uninitialized stack memory when the Image.quantize function uses an empty palette. This occurs because the ImagingPaletteCacheUpdate function leaves a local cache array...
CVE-2026-98413
A flaw was found in the Linux kernel's SELinux Security-Enhanced Linux subsystem. When an access check is performed with an empty permission set, the Access Vector Cache AVC fails to initialize the access decision structure before returning. A local attacker can exploit this flaw by triggering...
SUSE CVE-2026-98413
In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avchaspermnoaudit avchaspermnoaudit is documented to return a copy of the access decision in @avd, but its early return for an empty requested permission set leaves the buffer untouched. All...
CVE-2026-109438 3proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS4
3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option -Ne is configured. Attackers can send a client probe that fail...
CVE-2026-109438 3proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS4
3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option -Ne is configured. Attackers can send a client probe that fail...
CVE-2026-109438
Versions 0.9.7 through 1.0.1 of 3proxy are vulnerable to an uninitialized stack memory disclosure vulnerability. When the external-NAT option (-Ne) is configured, unauthenticated attackers can send a client probe that fails the SOCKS version check. This triggers a SOCKS4 reply containing uninitia...
CVE-2026-98413
The Linux kernel contains a vulnerability in the selinux component within the avc_has_perm_noaudit() function. The issue is caused by an early return for an empty requested permission set, which leaves the @avd buffer untouched. This results in callers receiving an uninitialized stack variable , ...
CVE-2026-98413 selinux: always fill AVC decision in avc_has_perm_noaudit()
In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avchaspermnoaudit avchaspermnoaudit is documented to return a copy of the access decision in @avd, but its early return for an empty requested permission set leaves the buffer untouched. All...
UBUNTU-CVE-2026-98413
In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avchaspermnoaudit avchaspermnoaudit is documented to return a copy of the access decision in @avd, but its early return for an empty requested permission set leaves the buffer untouched. All...