4760 matches found
Amazon Linux 2023 : openexr, openexr-devel, openexr-libs (ALAS2023-2026-1481)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1481 advisory. OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals a...
The vulnerability of the planar_decompress_plane_rle() function in the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the planardecompressplanerle function in the FreeRDP RDP client is related to data writing beyond the specified buffer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2026-33536
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and that could result in an out of bounds...
CVE-2026-30006
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file...
The vulnerability of the format_size_gb() function in the fs/ntfs3/super.c module of the Linux kernel file system allows a attacker to cause a service failure.
The vulnerability of the formatsizegb function in the fs/ntfs3/super.c module of the Linux kernel’s file system support mechanism is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the definition of the structure loongson2_clk_type{} in the driver drivers/clk/clk-loongson2.c of the Linux kernel’s software synchronization driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability in determining the structure of loongson2clktype in the drivers/clk/clk-loongson2.c file of the Linux kernel synchronization driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...
SUSE-SU-2026:1045-1 Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.293 fixes various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer bsc1257118. - CVE-2025-68285: libceph: fix potential use-after-free ...
The vulnerability of the piix4_probe() function in the driver module i2c/busses/i2c-piix4.c of the I2C hardware layer of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the piix4probe function in the driver module i2c/busses/i2c-piix4.c of the I2C hardware layer of the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the bpf_int_jit_compile() function in the arch/arm64/net/bpf_jit_comp.c module, which is part of the networking support on the ARM 64-bit kernel of the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the bpfintjitcompile function in the arch/arm64/net/bpfjitcomp.c module, which is part of the networking support on the ARM 64-bit Linux operating system, involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker...
CVE-2026-33307
Modgnutls is a TLS module for Apache HTTPD based on GnuTLS. In versions prior to 0.12.3 and 0.13.0, code for client certificate verification imported the certificate chain sent by the client into a fixed size gnutlsx509crtt x509 array without checking the number of certificates is less than or...
The vulnerability of the smb2_ioctl_query_info() function in the fs/cifs/smb2ops.c module of the Linux file system allows a hacker to cause a service failure.
The vulnerability of the smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c module of the Linux file system support module is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the xfrm_input() function in the net/xfrm/xfrm_input.c module of the Linux operating system allows a hacker to gain access to protected information or cause a service failure.
The vulnerability of the xfrminput function in the net/xfrm/xfrminput.c module of the Linux kernel is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
EUVD-2026-14467
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file...
CVE-2026-30006
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file...
CVE-2026-30006: Buffer Copy without Checking Size of Input
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file...
CVE-2026-30006
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file...
PT-2026-27148
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file...
CVE-2026-30006
XnSoft NConvert 7.230 is vulnerable to a Stack Buffer Overrun when processing specially crafted .tiff files . This vulnerability is caused by a buffer copy operation that fails to check the input size. The impact of this flaw is categorized as HIGH for availability , with a CVSS 3.1 base score of...
