48887 matches found
UBUNTU-CVE-2026-62291
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...
UBUNTU-CVE-2026-75147
FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1...
UBUNTU-CVE-2026-75146
FFmpeg before commit 65b0dab contains an out-of-bounds read in the DAS...
PT-2026-79143
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanline read old and read q-1 before any prior pixel exists. A crafted Radianc...
Linux Distros Unpatched Vulnerability : CVE-2026-75147
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer libavformat/rtpencav1.c. The keyframe detection loop that searches for a...
Security update for forgejo-cli (important)
openSUSE security update: security update for forgejo-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21605-1 Rating: important References: bsc1242683 bsc1248047 bsc1274529 Cross-References: CVE-2025-3416 CVE-2025-55159 CVE-2026-25541 CVSS score...
CVE-2026-76929
Wireshark's pcapng file parser contains an out-of-bounds read affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18, triggering a crash and denial of service when a crafted file is opened. Exploitation requires local access and user interaction; no in-the-wild exploitation is reported. Users should upg...
CVE-2026-76929 Out-of-bounds Read in Wireshark
Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76924 Out-of-bounds Read in Wireshark
Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76924
Wireshark versions 4.4.0–4.4.18 and 4.6.0–4.6.7 contain an out-of-bounds read in the Kerberos protocol dissector that crashes the application when processing malformed Kerberos traffic, causing denial of service (CVSS 5.5 MEDIUM). No exploitation observed in the wild. Update to a patched version;...
CVE-2026-76923
An out-of-bounds read vulnerability exists in the Bluetooth HFP (Hands-Free Profile) protocol dissector of Wireshark , affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18 . A remote attacker can exploit this by tricking a user into opening a specially crafted capture file , causing Wireshark to crash...
CVE-2026-76923 Out-of-bounds Read in Wireshark
Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76882
Wireshark's Bluetooth Attribute Protocol (ATT) dissector crashes in versions 4.6.0–4.6.7 and 4.4.0–4.4.18 when processing malformed Bluetooth traffic, causing denial of service. CVSS 4.7 (Medium) requires local access and user interaction. No exploitation evidence is provided. Upgrade to a patche...
CVE-2026-69550
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-17015
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...
CVE-2026-17015 IBM i Denial of Service
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...
EUVD-2026-62854
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...
CVE-2026-17015
IBM i versions 7.3 through 7.6 (feature 5770-SS1) suffer a CWE-125 out-of-bounds read, exploitable by a remote authenticated attacker to cause denial of service and leak sensitive information (CVSS 5.4 Medium). IBM provides PTFs: SJ11150 (7.6), SJ11149 (7.5), SJ11148 (7.4), SJ11147 (7.3); no work...