Linux Distros Unpatched Vulnerability : CVE-2026-111139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by...

UBUNTU-CVE-2026-111139

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...

CVE-2026-111139

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...

CVE-2026-111139

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...

CVE-2026-111139

The NetSurf libnsbmp library (versions through 0.1.7 ) is vulnerable to an out-of-bounds read in the bmp_decode_mask() function. By providing a crafted ICO file where the inner bitmap width is not a multiple of 8, an attacker can trigger a heap over-read that reads one byte past the image buffer....

CVE-2026-111139 NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...

CVE-2026-111139 NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...

CVE-2026-111139

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...

EUVD-2026-102266

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...

CVE-2026-111139: Out-of-bounds Read

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...