CVE-2026-18301

CVE-2026-18301 is an integer overflow (CWE-190) in GIMP 's PSD file parser, specifically within the read_channel_data function. Insufficient validation of user-supplied data allows an overflow before buffer allocation, enabling arbitrary code execution in the context of the current process. Explo...

CVE-2026-18301 GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18300

GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18300

CVE-2026-18300 is an integer overflow in GIMP 's HDR file parser (within the GEGL library). Insufficient validation of user-supplied data before buffer allocation allows a remote attacker to achieve arbitrary code execution in the context of the current process. Exploitation requires user interac...

CVE-2026-18300 GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

EUVD-2026-63449

GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18300 GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2022-4993

A flaw was found in HTML::FormHandler for Perl. The applyactions and adderror functions process error message text, which can be influenced by user-supplied request data, as a template. A remote attacker can exploit this by crafting malicious input, leading to unhandled exceptions that terminate...

RUSTSEC-2026-0268 Guest controlled-size host heap allocation through WASIp3 streams

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-x84v-gj2h-g759 For more information see the GitHub-hosted security advisory...

Guest controlled-size host heap allocation through WASIp3 streams

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-x84v-gj2h-g759 For more information see the GitHub-hosted security advisory...

kernel: smb/client: handle overlapping allocated ranges in fallocate

A flaw was found in the Linux kernel's Server Message Block SMB client. The smb3simplefallocaterange function, which manages file allocation, can incorrectly process overlapping allocated ranges provided by a server. This can result in parts of a file not being properly zero-filled, leading to...

Allocation of Resources Without Limits or Throttling

Overview org.springframework.graphql:spring-graphql is a GraphQL Support for Spring Applications Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the pagination support. An attacker can exhaust application memory or place significant,...

NanaZip 6.5 Denial of Service

NanaZip version 6.5 suffers from a denial of service vulnerability. A crafted .NET single-file bundle triggers an uncaught exception / unbounded allocation in the DotNetSingleFile handler's Extract. Exploit Title: NanaZip 6.5 - DoS Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla...

Elasticsearch 8.11.x < 8.18.0 DoS (ESA-2026-111)

The version of Elasticsearch installed on the remote host is 8.11.x prior to 8.18.0. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-111 advisory. - Memory Allocation with Excessive Size Value CWE-789 in the ES|QL query processing of Elasticsearch can lead to denial of...

PT-2026-81889

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.39 through 9.0.120 Apache Tomcat versions 8.5.59 through 8.5.100 Description An uncontrolled resource consumption issu...

cve-2026-59279 - HIGH - Unbounded persistent session allocation via repeated initialize requests

cve-2026-59279 - HIGH - Unbounded persistent session allocation via repeated initialize requests...

cve-2026-47859 - MEDIUM - Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS

cve-2026-47859 - MEDIUM - Unbounded memory allocation in RFC6587SyslogDeserializer octet-counted framing — remote DoS...

CVE-2026-18308: Integer Overflow or Wraparound

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

PT-2026-79235

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote attackers can cause a denial of service due to improper validation of an allocation size. Recommendations At the moment, there is no information about a newer version...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the process that handles incoming payloads. An attacker can cause service disruption by sending specially crafted malicious payloads. Remediation Upgrade...