CVE-2025-62821

Microsoft HEIF Image Extensions msheifstore.dll: Source-buffer under-allocation in CopyPixels path leads to out-of-bounds read and Access Violation DoS When decoding a crafted HEIF image through WIC, the msheif codec allocates a 1-byte source buffer but later attempts to copy a very large amount ...

CVE-2026-124000

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-124000 ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-124000 ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-124000 ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-124000

NASA JPL ION-DTN versions 2.1.0 through 4.2.0 are vulnerable to a heap buffer under-allocation in the Asynchronous Message Service daemon (amsd ). The root cause is an insufficient buffer size calculation for the internal state-event object, which occurs when the daemon processes Meta-AMS (MAMS) ...

EUVD-2026-120223

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

PT-2026-140967

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-124000: nasa-jpl ION-DTN: NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message…

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

Linux Distros Unpatched Vulnerability : CVE-2026-71973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers ca...

CVE-2026-71973

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

DEBIAN-CVE-2026-71973

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

UBUNTU-CVE-2026-71973

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

CVE-2026-71973 U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

CVE-2026-71973 U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

OPENSUSE-SU-2026:21733-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - Update CVE-2026-66757 patch. The original patch wasn't allocating enough bytes...

ANT-2026-G1XC2M5V · CGIF · oob-write

oob-write high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-G1XC2M5V: cgif/cgiffuzzer/20251218020844unknown/ cgif's LZW encoder computes a conservative upper bound for t...

CVE-2026-48095

7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers to cause arbitrary code execution or application...

PJSIP input validation error vulnerability

PJSIP is an open-source, free and open-source multimedia communication library developed in C language. It implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Versions of PJSIP 2.16 and earlier contained a vulnerability related to input validation errors. This...

CVE-2026-41197: Incorrect Calculation of Buffer Size

Noir is a Domain Specific Language for SNARK proving systems that is designed to use any ACIR compatible proving system, and Brillig is the bytecode ACIR uses for non-determinism. Noir programs can invoke external functions through foreign calls. When compiling to Brillig bytecode, the SSA...