Medium: gimp

Issue Overview: A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions ysize and zsize are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum valu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100312 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypiclkregister devmkasprintf returns NULL when memory...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099476 advisory. ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supp...

Linux kernel AppArmor Resource Buffer Overflow DoS

The vulnerability of the apparmor/resource.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099956 advisory. In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qedcxttablesalloc If one of the later PF or VF CID bitmap allocations...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100372 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100098)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100098 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4mbfindbygoal There's issue as follows:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100747 advisory. In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc call for...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101133 advisory. Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101372 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100340)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100340 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4mbfindbygoal There's issue as follows:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100187 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udmaprobe devmkasprintf returns NULL when memory allocation fail...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100168 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeedlpcenablesnoop devmkasprintf returns NULL when memory...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100149 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypiclkregister devmkasprintf returns NULL when memory...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100699 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hidpostreset You can build a USB device that includes a HID componen...

NanaZip 6.5 - DoS

Exploit Title: NanaZip 6.5 - DoS Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla Vendor Homepage: https://github.com/M2Team/NanaZip Software Link: https://github.com/M2Team/NanaZip/releases Version: NanaZip = 6.5 Preview 6.5.1742.0 fixed 6.5.1749.0 Tested on: Windows CVE:...

CVE-2026-74788

Scriban before 7.0.0 affected versions = 6.6.0 contains an uncontrolled memory allocation vulnerability in the string.padleft and string.padright template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes...

CVE-2026-74788

Scriban before 7.0.0 affected versions = 6.6.0 contains an uncontrolled memory allocation vulnerability in the string.padleft and string.padright template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes...

CVE-2026-74788

CVE-2026-74788 affects Scriban before 7.0.0 (affected versions ≤ 6.6.0). The vulnerability resides in the template functions string.pad_left and string.pad_right , which do not validate the width parameter before delegating to .NET’s String.PadLeft/PadRight. An attacker can supply an extremely la...

CVE-2026-74788 Scriban before 7.0.0 Denial of Service via string.pad_left/pad_right

Scriban before 7.0.0 affected versions = 6.6.0 contains an uncontrolled memory allocation vulnerability in the string.padleft and string.padright template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes...