EUVD-2026-97709

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash...

CVE-2026-109265

The ImageMagick software versions 7.1.1-7 before 7.1.2-32 are vulnerable to a heap buffer over-read (CWE-125). The root cause is an incorrect string termination in XMP profiles , which allows an attacker to supply a crafted image with a malformed XMP profile to trigger the over-read and potential...

CVE-2026-109265

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash...

CVE-2026-109265

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash...

CVE-2026-109265: Out-of-bounds Read

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash...

Medium: libsoup

Issue Overview: OOB Read via Integer Overflow on libsoup through libsoup/websocket/soup-websocket-connection.c via processframe leads to Undefined Behavior CVE-2026-0716 The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving...

Important: tomcat-native

Issue Overview: Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be...

PT-2026-110698

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.0-21 through 7.1.2-31 Description A heap buffer over-read exists in the handling of the -fx option. This occurs when a specific -fx operation reads beyond the boundaries of an allocated heap buffer. An attacker can...

CVE-2026-109281: Out-of-bounds Read

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap...

PT-2026-121736

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

PT-2026-110682

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.1-7 through 7.1.2-31 Description A heap buffer over-read occurs due to incorrect string termination in XMP profiles, which are metadata formats used to describe the creation and history of a digital asset. An attacker...

Amazon Linux 2 : qt5-qtbase (ALAS-2026-3980)

The version of qt5-qtbase installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3980 advisory. Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XM...

Amazon Linux 2 : libsoup (ALAS-2026-3970)

The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3970 advisory. OOB Read via Integer Overflow on libsoup through libsoup/websocket/soup-websocket-connection.c via processframe leads to...

EulerOS 2.0 SP13 : glib2 (EulerOS-SA-2026-4048)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change...

EulerOS 2.0 SP13 : glib2 (EulerOS-SA-2026-4139)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change...

libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

A flaw was found in libpng, a reference library for processing PNG Portable Network Graphics image files. A local attacker could exploit a heap buffer over-read vulnerability in the pngimagefinishread function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with ...

libpng: LIBPNG heap buffer over-read

A buffer over read flaw has been discovered in libpng. A heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through the simplified write API with convertto8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and image...

Linux Distros Unpatched Vulnerability : CVE-2026-98375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the lengt...

CVE-2026-101130

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-101094

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...