331290 matches found
Exploit for CVE-2026-111497
brotli-cve-check Scans a project or container image for CVE...
CLSA-2026-1792928909 Fix CVE(s): CVE-2026-107161
SECURITY UPDATE: Heap buffer overflow in DIGEST-MD5 addtochallenge - debian/patches/0024-CVE-2026-107161.patch: recompute the required buffer size after quoting the value in plugins/digestmd5.c - CVE-2026-107161...
[SECURITY] [DSA 6584-1] varnish security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6584-1 [email protected] https://www.debian.org/security/ Aron Xu October 25, 2026 https://www.debian.org/security/faq -...
MGASA-2026-0539 Updated iperf package fixes security vulnerabilities
Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...
Updated iperf package fixes security vulnerabilities
Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...
ImageMagick buffer error vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a buffer error vulnerability. This vulnerability arises from a heap buffer overflow occurring during X11 animate operations when processing specially crafted images; it may lead to heap memory corruption and cause the...
ImageMagick numeric error vulnerability
Versions of ImageMagick prior to 7.1.2-33 contain a numerical error vulnerability. This vulnerability stems from a heap buffer overflow when requesting convex hull information on 32-bit systems. An attacker can supply specially crafted images processed via convex hull computation, thereby...
PT-2026-122990
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-58 ImageMagick versions prior to 7.1.2-33 Description A stack-based buffer overflow exists when handling bzip2 compressed images. An attacker can provide a specially crafted image using bzip2 compression to...
PT-2026-122994
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-33 Description A heap buffer overflow occurs on 32-bit systems when convex-hull information is requested. An attacker can provide specially crafted images that, when processed with convex-hull calculations,...
AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792140497)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792140497 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a...
Amazon Linux 2023 : iperf3, iperf3-devel (ALAS2023-2026-3299)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3299 advisory. iperf3 3.20-3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an...
Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2026-3252)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3252 advisory. TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service CVE-2026-95386 The spdyassembledataframes function in epan/dissectors/packet-spdy.c accumulates SPDY DATA frame payload...
Red Hat: CVE-2026-116153: ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations
ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...
Red Hat: CVE-2026-116160: ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the applicatio...
ImageMagick buffer error vulnerability
Versions 7.x prior to ImageMagick 6.9.13-58 and versions prior to 7.1.2-33 contain a buffer error vulnerability. This vulnerability stems from a stack buffer overflow when processing bzip2-compressed images. Attackers can exploit this by providing specially crafted bzip2-compressed images; during...
SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:4895-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4895-1 advisory. - CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds reads...
Amazon Linux 2023 : aspell, aspell-devel (ALAS2023-2026-3275)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3275 advisory. A flaw was found in Aspell. An attacker could achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to process a specially crafted dictionary file. This issue...
KLA91368 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can be exploited to cause denial of service. 2. An...
Amazon Linux 2023 : ghostscript, ghostscript-gtk, ghostscript-tools-dvipdf (ALAS2023-2026-3294)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3294 advisory. A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the...
Amazon Linux 2023 : qemu, qemu-common, qemu-guest-agent (ALAS2023-2026-3241)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3241 advisory. hw/usb/hcd-xhci: Set reentrancy guard in timer functions CVE-2026-17588 NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/1f24066fc88d33455ee54a20f29994d9e69997ba v11.1.0-rc3NOTE:...