CVE-2026-61862

ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printed read past the profile boundary. This behavior occurs whe...

firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics: CanvasWebGL component...

firefox: thunderbird: Incorrect boundary conditions in the Web Audio component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Web Audio component...

firefox: thunderbird: Incorrect boundary conditions in the Internationalization component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Internationalization component...

CVE-2026-15030

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security...

CVE-2026-15030

The CVE-2026-15030 entry concerns ASUS components: System Control Interface v3, System Control Interface, and ASUS Business Manager. The weakness is an out-of-bounds read caused by a crafted IOCTL request that bypasses validation, enabling a local administrator to read memory regions beyond the i...

CVE-2026-15030

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security...

EUVD-2026-44588

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security...

ROS-20260715-73-0002

The vulnerability of the modproxyajp function in the Apache HTTP Server is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a remote attacker to disclose confidential information...

Microsoft Office Out-of-Bounds Reading Vulnerability (CNVD-2026-31555)

Microsoft Office is a suite of office software that provides functions such as document processing, spreadsheet calculations, and presentation creation. Microsoft Office has a out-of-bounds read vulnerability, which stems from an inability to properly validate memory boundaries, resulting in...

Adobe Audition Out-of-Bounds Write Vulnerability (CNVD-2026-31987)

Adobe Audition is an audio editing software developed by Adobe, a company based in the United States. Adobe Audition has a boundary violation vulnerability, which stems from improper handling of boundary checks for malicious files. Attackers can exploit this vulnerability to execute arbitrary cod...

The vulnerability of the `nikon_load_padded_packed_raw()` function in the `src/decoders/decoders_libraw.cpp` file, which is part of the LibRaw image processing library, allows a hacker to trigger a service failure.

The vulnerability of the nikonloadpaddedpackedraw function in the src/decoders/decoderslibraw.cpp file, which is part of the LibRaw image processing library, relates to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing the loadflags and rawwidt...

PT-2026-60387

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c...

Microsoft Office Out-of-Bounds Reading Vulnerability (CNVD-2026-31556)

Microsoft Office is a suite of office software that provides features such as document processing, spreadsheet calculations, presentation creation, and collaboration. Microsoft Office has a out-of-bounds read vulnerability, which stems from the program’s failure to properly validate memory...

PT-2026-60186

Name of the Vulnerable Software and Affected Versions NGINX Agent affected versions not specified Description An issue exists where the config dirs directive allows a remotely authenticated low-privileged attacker to obtain limited read and write access to files located outside of the designated...

ROS-20260715-73-0009

The vulnerability of the ajpparsedata function in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...

JLSEC-2026-731 In `TLSX_EchChangeSNI`, the ctx->extensions branch set extensions unconditionally even when...

In TLSXEchChangeSNI, the ctx-extensions branch set extensions unconditionally even when TLSXFind returned NULL. This caused TLSXUseSNI to attach the attacker-controlled publicName to the shared WOLFSSLCTX when no inner SNI was configured. TLSXEchRestoreSNI then failed to clean it up because its...

CVE-2026-15714

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soupmultipartinputstreamreadheaders function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When...

AZL-92405 CVE-2026-15714 affecting package libsoup 3.4.4-16

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soupmultipartinputstreamreadheaders function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When...

CVE-2026-15714

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soupmultipartinputstreamreadheaders function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When...