GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ANI files. The...

PT-2026-26458

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the parsing of ANI files due to insufficient validation of user-supplied data, leading to an integer overflow before buffer allocation. This can allow remote attackers to execut...

TencentOS Server 3: gdk-pixbuf2 (TSSA-2024:0229)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0229 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EUVD-2025-138254

Malicious code in avangs-olim-ani npm...

EUVD-2025-138161

Malicious code in avangs-olium-ani npm...

MAL-2025-181852 Malicious code in avangs-olium-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543ffac541187b4195636a6dccfb0b7d0925f3d1b8f6e2e44bcc51043373a31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141467

Malicious code in hunim-satsgamf-ani npm...

Malicious code in maka-ani-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf496352c4b51ad3af64187f4f944402770b315f462531d9ad3dbab3f634393d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144167

Malicious code in maka-ani-gunalia npm...

EUVD-2025-147688

Malicious code in tobrut-hentai-ani npm...

siddheshtea (=1.1.6) potentially affected by unknown CVE via maka-ani-gunalia (=1.0.0)

maka-ani-gunalia NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on maka-ani-gunalia and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159144...

Malicious code in tobrut-hentai-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d77d392774182db83717e88c6ee03004cc63611529b9a754d2277513de6cd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abia-avugi-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12a36a21cd6e7308ecc59cb5ad371e04be40dc0581ef13a37c59df2fccc9c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2006-4362

Malware in sbrugna...

EUVD-2020-27243

Malware in sbrugna...

EUVD-2017-6079

Malware in sbrugna...

EUVD-2018-15708

Malware in sbrugna...

EUVD-2025-16289

Malicious code in bioql PyPI...

CLSA-2025-1758824659 gdk-pixbuf2: Fix of CVE-2022-48622

CVE-2022-48622: fix heap memory corruption issue in ANI decoder to prevent denial of service or code execution attack...

Malicious code in @hishprorg/illum-animi-minus (npm)

The package @hishprorg/illum-animi-minus was found to contain malicious code...