CVE-2026-39020

An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file...

CVE-2026-39020

An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file...

CVE-2026-39020

Wings3D v.2.4.1 is vulnerable to a denial of service when a local attacker supplies a crafted Wavefront OBJ file for processing. The CVSS 3.1 score is 5.5 (MEDIUM) , with local attack vector, low complexity, no privileges required, and user interaction required, impacting only availability. The v...

EUVD-2026-75121

An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file...

PT-2026-86450

CVE-2026-39020 assigned - DoS in Wings3D 2.4.1 via crafted Wavefront OBJ file. I found this with vulcan our LLM based fuzzer Advisory: https://t.co/tqzQNlsHFz bugbounty CVE fuzzing security...

GHSA-8WV5-X4W7-5GWW vulnerabilities

Vulnerabilities for packages: telegraf, datadog-agent, grafana, amazon-cloudwatch-agent, jaeger, temporal, bento, seaweedfs, wavefront-proxy, tempo, zipkin, minio, nri-kafka, nri-jmx, jitsucom-bulker, nri-cassandra...

CVE-2026-43871 vulnerabilities

Vulnerabilities for packages: telegraf, datadog-agent, grafana, amazon-cloudwatch-agent, jaeger, temporal, bento, seaweedfs, wavefront-proxy, tempo, zipkin, minio, nri-kafka, nri-jmx, jitsucom-bulker, nri-cassandra...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: trillian-fips, argo-workflows-fips, wavefront-collector-for-kubernetes, step, caddy, argo-workflows, step-ca, trillian, kots, caddy-fips...

CLEANSTART-2026-PY42210 Security fixes in wavefront-proxy 13.8-r0

Package wavefront-proxy version 13.8-r0 fixes 7 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv, ghsa-6hg6-v5c8-fphq, ghsa-3pxv-7cmr-fjr4...

CLEANSTART-2026-ZR97403 Security fixes in wavefront-proxy 13.7-r1

Package wavefront-proxy version 13.7-r1 fixes 1 vulnerabilities: CVE-2026-41417...

CLEANSTART-2026-RH97316 Security fixes in wavefront-proxy 13.9-r2

Package wavefront-proxy version 13.9-r2 fixes 1 vulnerabilities: CVE-2026-42577...

CVE-2026-45383

A flaw was found in libde265, an open-source implementation of the H.265 video codec. A remote attacker could exploit a heap buffer overflow vulnerability by providing specially crafted video files. This occurs when decoding a Wavefront Parallel Processing WPP HEVC slice, where malformed headers...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45383

CVE-2026-45383 affects libde265 prior to 1.0.19, where a heap-buffer-overflow can occur during HEVC WPP slice decoding. In decoder_context::decode_slice_unit_WPP(), ctbAddrRS is computed as ctbRow*ctbsWidth and, if PPS/SPS headers encode a value that exceeds pps.CtbAddrRStoTS.size(), an out-of-bo...

CVE-2026-45383 libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fixed integer overflow in sample size validation The wavefrontsendsample function has a problem with integer overflow when validating the sample size. The header-size field is of type u32, but it is cast to int f...

CLEANSTART-2026-WG59699 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42577, ghsa-72hv-8253-57qq applied in versions: 13.9-r0, 13.9-r1, 13.9-r2

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JW30455 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-41417, CVE-2026-42577, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv applied in versions: 13.7-r0, 13.7-r1, 13.7-r2, 13.9-r0

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MM00120 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-41417, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv applied in versions: 13.8-r0, 13.9-r0

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...