PT-2026-88830

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

ROS-20260909-73-0020

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260909-73-0004

The vulnerability in Chromium is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

CVE-2026-71614

The GPAC multimedia framework (version c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 ) contains a vulnerability that allows an attacker to achieve arbitrary code execution . The flaw resides in the src/media_tools/dvb_mpe.c file, specifically within the descriptorTime_slice_fec_identifier() and gf_m2t...

Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: Incomplete fix for...

RHEL 10 : perl-DBI (RHSA-2026:65887)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:65887 advisory. DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variabl...

openSUSE 16 Security Update : php-composer2 (openSUSE-SU-2026:21778-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21778-1 advisory. This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257. Tenabl...

mongocryptd/crypt_shared Code Execution

The vulnerability of the mongocryptd/cryptshared component of the MongoDB Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

Microchip SAMA5D4 Voltage Spike Code Execution

The vulnerability of the Microchip SAMA5D4 microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

PT-2026-88924

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

ROS-20260909-73-0031

The vulnerability in Chromium is related to errors in data type mixing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260909-73-0008

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-71613

A buffer overflow vulnerability exists in GPAC (version c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 ) due to a failure to check the size of input during a buffer copy. This flaw allows an attacker to execute arbitrary code via the j2kdec_process() function. The issue is addressed in commit 9a253a07f...

ROS-20260909-73-0107

The vulnerability in Chromium is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ALSA-2026:66248 Important: ansible-core security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...