PT-2026-135120

Security vulnerability affects the graphviz package. Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes...

Zephyr buffer error vulnerability

Versions Zephyr 3.3.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises because the bthcitxsyncin function fails to perform length checks when copying HCI packets from the controller to the host’s USB transfer buffer; as a result, a buffer overflow occurs, potentially...

Kakao buffer overflow vulnerability

Versions 0.1, 0.2, 0.3, and 0.4 of KAKAO contain a buffer error vulnerability. This vulnerability stems from improper handling of the hiddendim and classnum parameters in the khaiii::nn::Linear::open function within the JSON Config File Handler component, potentially leading to out-of-bounds read...

ROS-20261023-73-0104

The vulnerability in libheif is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20261023-73-0088

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

UBUNTU-CVE-2026-111497

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-93519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by...

ROS-20261023-73-0118

The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0130

The vulnerability of the Track::load function in the stsz/stts component, a decoder and file format encoder, is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

AlmaLinux 9.2 [TuxCare] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ALMALINUX9.2:CLSA-2026:1792754583)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792754583 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows ...

AlmaLinux 9.6 [TuxCare] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ALMALINUX9.6:CLSA-2026:1792755607)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792755607 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows ...

PT-2026-121852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wave5 driver where invalid data within dec output info can lead to the driver writing to invalid memory. This occurs due to a buffer overflow in the wave5 vpu dec...

Linux kernel Metronomefb DoS

The vulnerability in the metronomefbprobe function within the drivers/video/fbdev/metronomefb.c component of the Linux kernel operating system stems from insufficient resource management during its existence. Exploitation of this vulnerability may enable an attacker to cause a denial of service...

Linux ip_vs_core Heap Buffer Overflow DoS

The vulnerability of the net/netfilter/ipvs/ipvscore.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

FreeBSD : cjose -- Heap-based Buffer Overflow (35b3a492-b05a-11f1-9369-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 35b3a492-b05a-11f1-9369-b42e991fc52e advisory. https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj reports: OpenIDC/cjose is a C...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (CENTOS7:CLSA-2026:1790603589)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790603589 advisory. - GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...

Rocky Linux 9.6 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792791669)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792791669 advisory. - xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling CVE-2026-88812 -...

nginx 0.1.29 < 1.30.6 / 1.31.x < 1.31.7 Buffer Overflow Vulnerability

According to its Server response header, the installed version of nginx is 0.1.29 prior to 1.30.6 or 1.31.0 prior to 1.31.7. It is, therefore, affected by the following issue : - A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive...

SUSE SLED15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4836-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4836-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl...

Linux Distros Unpatched Vulnerability : CVE-2026-98882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a...