PT-2026-64104

Summary src/libImaging/Jpeg2KDecode.c:853 accumulates total component width across every tile in a JPEG2000 image instead of recomputing it per tile. That accumulated value is then used in the tile bytes calculation at src/libImaging/Jpeg2KDecode.c:868, which can make the decoder grow state-buffe...

CVE-2026-64132 ipv6: ioam: refresh hdr pointer before ioam6_event()

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6event Reported by Sashiko: In ipv6hopioam, the hdr pointer is initialized to point into the skb's linear data buffer. Later, the code calls skbensurewritable, which might reallocate the...