CVE-2026-97631

The EDK2 project contains a pre-boot vulnerability within the BIOS environment, specifically affecting the PXE driver . The root cause involves an Incorrect Calculation of Buffer Size , leading to a Classic Buffer Overflow and Out-of-bounds Write during remote access. Successful exploitation can ...

CVE-2026-97631 Pre-boot RCE in EDK II PXE driver

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

EUVD-2026-108230

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

GHSA-G7CR-3P24-7WF7 Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

============================================================================ Heap buffer overflow writing JPEG comment after ICC profile fills buffer Location: src/libImaging/JpegEncode.c:330 in ImagingJpegEncode Commit: a707c6b21c313880d0771e54965d142dd42358b6...

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

============================================================================ Heap buffer overflow writing JPEG comment after ICC profile fills buffer Location: src/libImaging/JpegEncode.c:330 in ImagingJpegEncode Commit: a707c6b21c313880d0771e54965d142dd42358b6...

EUVD-2026-107563

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation Windows builds...

Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

GHSA-9V8H-QQGM-4M35 Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

CVE-2026-78846

Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing...

OESA-2026-4529 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.CVE-2026-88831 BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata...

OESA-2026-4528 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.CVE-2026-88831 BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata...

OESA-2026-4527 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.CVE-2026-88831 BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata...

OESA-2026-4526 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.CVE-2026-88831 BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata...

OESA-2026-4515 gd security update

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. The most common applications of GD involve website development, although it can be...

OESA-2026-4516 gd security update

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. The most common applications of GD involve website development, although it can be...

OESA-2026-4514 gd security update

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. The most common applications of GD involve website development, although it can be...

OESA-2026-4513 gd security update

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. The most common applications of GD involve website development, although it can be...

OESA-2026-4458 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird...

OESA-2026-4457 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird...