EUVD-2026-109410

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption...

CVE-2026-116149 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption...

Exploit for CVE-2026-111497

brotli-cve-check Scans a project or container image for CVE...

CVE-2020-8249

CVE-2020-8249: Buffer Overflow in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a “sprintf” which can result in a buffer overflow. Because the “sprintf” writes the values on the stack, if a big enough string is passed to it, then it...

KLA91368 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can be exploited to cause denial of service. 2. An...

PT-2026-122994

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

PT-2026-123001

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the applicatio...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2026-3252)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3252 advisory. TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service CVE-2026-95386 The spdyassembledataframes function in epan/dissectors/packet-spdy.c accumulates SPDY DATA frame payload...

AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792140497)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792140497 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a...

ncurses: Fix of 2 CVEs

CVE-2021-39537: fix heap buffer overflow in nccaptoinfo with a crafted termcap entry - CVE-2023-29491: ignore terminfo/termcap environment variables in setuid/setgid programs --disable-root-environ...

RLSA-2026:88477 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: calipso: Don't call calipso functions for AFINET sk. CVE-2025-38147 kernel: ipv4: raw: reject IPHDRINCL packets with ihl 5 CVE-2026-64114 kernel: net/smc: reject CHID-0 ACCEPT that matche...

CVE-2026-116014 open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

CVE-2026-116014

The open62541 library (versions 1.5.0 before 1.5.7 ) is vulnerable to an integer overflow within the UA_DataType_fromStructureDescription() function. The flaw occurs when the 16-bit memSize field is wrapped during the processing of large custom structure definitions. A malicious OPC UA server can...

CLSA-2026-1792819460 tigervnc: Fix of 3 CVEs

CVE-2026-93517: GLX RenderLarge copied client dataBytes into a buffer sized by the smaller embedded cmdlen, allowing a heap buffer overflow - CVE-2026-93518: XKB sizesyms/numsyms/sizeacts/numacts were 16-bit, so resize computations truncated and caused undersized allocations and heap overflow -...

CLSA-2026-1792806631 ncurses: Fix of 2 CVEs

CVE-2021-39537: fix heap buffer overflow in nccaptoinfo with a crafted termcap entry - CVE-2023-29491: ignore terminfo/termcap environment variables in setuid/setgid programs --disable-root-environ...

CentOS Linux 8 [TuxCare] Security Update: brotli / brotli-devel / python3-brotli (CENTOS-STREAM8:CLSA-2026:1792827522)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1792827522 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms...

CentOS Linux 8.4 [TuxCare] Security Update: brotli / brotli-devel / python3-brotli (CENTOS8.4:CLSA-2026:1792827285)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792827285 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows ...

CentOS Linux 8.5 [TuxCare] Security Update: brotli / brotli-devel / python3-brotli (CENTOS8.5:CLSA-2026:1792827041)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792827041 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows ...

Linux Distros Unpatched Vulnerability : CVE-2026-115863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in getdomains in gdhcp/client.c. It copies a fixed NSMAXDNAME 1025...

Amazon Linux 2 : wireshark (ALAS-2026-4006)

The version of wireshark installed on the remote host is prior to 2.6.2-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4006 advisory. SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-95389 Heap buffer...