CVE-2026-16234 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-16234

CVE-2026-16234 is a memory corruption vulnerability — specifically an Out-of-Bounds Read — in NI LabVIEW triggered when loading a specially crafted VI. Successful exploitation requires user interaction (opening the malicious file), with no prior privileges needed. The flaw can lead to information...

CVE-2026-59186 OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...

CVE-2026-59186 OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...

CVE-2026-59186

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...

CVE-2026-59186

OpenEXR , the reference implementation for the EXR image format widely used in the motion picture industry, is affected by a heap out-of-bounds write on 32-bit/ILP32 builds. A crafted tiled EXR file with a small 40×40 dataWindow but a 65537×65537 tile size, when read through the TiledRgbaInputFil...

CVE-2026-59186 OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...

CVE-2026-59186

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...

Out-of-Bounds

Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-Bounds through the processing of crafted XML documents in the xmlSchemaValidateStream or xmlEncodeEntitiesInternal functions...

Out-of-Bounds

Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-Bounds via the buffer handling process in the packaged libxml2 component. An attacker can cause out-of-bounds memory writes ...

Out-of-bounds Write

Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-bounds Write via the processing of DTD validation errors with long QName prefixes and during validation against untrusted XML Schemas. An attacker can execute arbitrary co...

Out-of-bounds Read

Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-bounds Read via the xmlSchemaIDCFillNodeTables function. An attacker can cause a denial of service by submitting specially...

CVE-2026-59184

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

CVE-2026-59184

OpenEXR (the reference implementation for the EXR image format, widely used in motion picture pipelines) is affected by a memory corruption vulnerability in TypedFlatImageChannel::row() . A crafted EXR file with a nonzero dataWindow.min causes the function to return an invalid heap pointer, leadi...

EUVD-2026-65583

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

CVE-2026-59184 OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

CVE-2026-59184

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

CVE-2026-16233 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-16233

CVE-2026-16233 is an out-of-bounds write memory corruption vulnerability in NI LabVIEW triggered when loading a specially crafted VI file. Successful exploitation requires local access and user interaction (opening the malicious VI), but no prior privileges. The impact ranges from information dis...

CVE-2026-68516

A flaw was found in OpenEXR. A remote attacker could provide a specially crafted HTJ2K-compressed EXR image file. When OpenEXR processes this file with JPEG 2000 SIZ fields that place the first tile outside the visible image, it can lead to invalid tile and codeblock geometry. This results in a...