368 matches found
Important: firefox
Issue Overview: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single...
JLSEC-2026-95
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single allocation acros...
Amazon Linux 2023 : firefox (ALAS2023-2026-1554)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1554 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and...
Important: libpng
Issue Overview: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single...
Amazon Linux 2023 : libpng, libpng-devel, libpng-static (ALAS2023-2026-1563)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1563 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and...
Important: firefox
Issue Overview: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single...
CVE-2026-35441
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus' GraphQL endpoints /graphql and /graphql/system did not deduplicate resolver invocations within a single request. An authenticated user could exploit GraphQL aliasing to repeat an expensive...
CVE-2026-35441 Directus Affected by GraphQL Alias Amplification Denial-of-Service Due to Missing Query Cost/Complexity Limits
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus' GraphQL endpoints /graphql and /graphql/system did not deduplicate resolver invocations within a single request. An authenticated user could exploit GraphQL aliasing to repeat an expensive...
CVE-2026-35441: Uncontrolled Resource Consumption
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus' GraphQL endpoints /graphql and /graphql/system did not deduplicate resolver invocations within a single request. An authenticated user could exploit GraphQL aliasing to repeat an expensive...
The vulnerability of the qla24xx_build_scsi_type_6_iocbs() function in the drivers/scsi/qla2xxx/qla_iocb.c module of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.
The vulnerability of the qla24xxbuildscsitype6iocbs function in the drivers/scsi/qla2xxx/qlaiocb.c driver for SCSI devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-33416)
The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33416 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG...
The vulnerability of the cal_ctx_v4l2_init_formats() function in the driver/media/platform/ti-vpe/cal-video.c file of the Linux kernel’s multimedia device support driver allows a attacker to cause a service failure.
The vulnerability of the calctxv4l2initformats function in the driver/media/platform/ti-vpe/cal-video.c file of the Linux kernel’s multimedia device support driver is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a system failure...
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
...
The vulnerability of the xfs_trans_alloc_dir() function in the fs/xfs/xfs_trans.c module of the Linux file system support module allows a attacker to cause a service failure.
The vulnerability of the xfstransallocdir function in the fs/xfs/xfstrans.c module of the Linux file system support module is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...
AZL-80990 CVE-2026-33416 affecting package libpng for versions less than 1.6.56-1
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single allocation acros...
AZL-81345 CVE-2026-33416 affecting package optipng 0.7.8-5
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single allocation acros...
ALPINE-CVE-2026-33416
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single allocation acros...
AZL-81333 CVE-2026-33416 affecting package libpng15 1.5.30-15
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single allocation acros...
AZL-81336 CVE-2026-33416 affecting package openjpeg2 2.3.1-12
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single allocation acros...
AZL-81324 CVE-2026-33416 affecting package gdal 3.6.3-2
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single allocation acros...