CVE-2026-116149 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption...

EUVD-2026-109410

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption...

CVE-2026-116149 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption...

Exploit for CVE-2026-111497

brotli-cve-check Scans a project or container image for CVE...

CVE-2020-8249

CVE-2020-8249: Buffer Overflow in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a “sprintf” which can result in a buffer overflow. Because the “sprintf” writes the values on the stack, if a big enough string is passed to it, then it...

PT-2026-122994

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

PT-2026-123001

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the applicatio...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2026-3252)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3252 advisory. TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service CVE-2026-95386 The spdyassembledataframes function in epan/dissectors/packet-spdy.c accumulates SPDY DATA frame payload...

AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792140497)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792140497 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a...

KLA91368 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can be exploited to cause denial of service. 2. An...

ncurses: Fix of 2 CVEs

CVE-2021-39537: fix heap buffer overflow in nccaptoinfo with a crafted termcap entry - CVE-2023-29491: ignore terminfo/termcap environment variables in setuid/setgid programs --disable-root-environ...

RLSA-2026:88477 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: calipso: Don't call calipso functions for AFINET sk. CVE-2025-38147 kernel: ipv4: raw: reject IPHDRINCL packets with ihl 5 CVE-2026-64114 kernel: net/smc: reject CHID-0 ACCEPT that matche...

CVE-2026-116014

The open62541 library (versions 1.5.0 before 1.5.7 ) is vulnerable to an integer overflow within the UA_DataType_fromStructureDescription() function. The flaw occurs when the 16-bit memSize field is wrapped during the processing of large custom structure definitions. A malicious OPC UA server can...

CVE-2026-116014 open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

CLSA-2026-1792819460 tigervnc: Fix of 3 CVEs

CVE-2026-93517: GLX RenderLarge copied client dataBytes into a buffer sized by the smaller embedded cmdlen, allowing a heap buffer overflow - CVE-2026-93518: XKB sizesyms/numsyms/sizeacts/numacts were 16-bit, so resize computations truncated and caused undersized allocations and heap overflow -...

CLSA-2026-1792806631 ncurses: Fix of 2 CVEs

CVE-2021-39537: fix heap buffer overflow in nccaptoinfo with a crafted termcap entry - CVE-2023-29491: ignore terminfo/termcap environment variables in setuid/setgid programs --disable-root-environ...

Linux Distros Unpatched Vulnerability : CVE-2026-115863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in getdomains in gdhcp/client.c. It copies a fixed NSMAXDNAME 1025...

RockyLinux 10 : kernel (RLSA-2026:88477)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:88477 advisory. kernel: calipso: Don't call calipso functions for AFINET sk. CVE-2025-38147 kernel: ipv4: raw: reject IPHDRINCL packets with ihl 5 CVE-2026-64114 kerne...

AlmaLinux 9.6 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792819460)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792819460 advisory. - xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow CVE-2026-93517 -...

MiracleLinux 8 : xorg-x11-server-Xwayland-21.1.3-20.el8_10.4 (AXSA:2026-2137:09)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2137:09 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server:...