SUSE-SU-2026:4646-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. -...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. CVE-2026-93517: GLX...

SUSE-SU-2026:4645-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. -...

SUSE CVE-2026-103658

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

SUSE CVE-2026-109250

FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collectkeys that allows local attackers to write past the fixed 64-entry keys array during PKCS11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots ...

SUSE CVE-2026-109265

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash...

SUSE CVE-2026-109279

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security...

SUSE CVE-2026-109281

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap...

hplip: heap-based buffer overflow can lead to remote code execution

A flaw was found in HPLIP. A heap-based buffer overflow could potentially allow an attacker to achieve code execution, escalate privileges, cause a denial of service, disclose sensitive information, or perform unauthorized file modifications under certain conditions...

hplip: heap-based buffer overflow can lead to remote code execution

A flaw was found in HPLIP. A heap-based buffer overflow could potentially allow an attacker to achieve code execution, escalate privileges, cause a denial of service, disclose sensitive information, or perform unauthorized file modifications under certain conditions...

Important: Red Hat Security Advisory: hplip security update

An update for hplip is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Turboderp ExLlamaV2 Buffer Error Vulnerability

Turboderp ExLlamaV2 0.3.2 and earlier versions have a buffer error vulnerability. This vulnerability stems from the incorrect handling of parameters dataoffsets in the STFile.gettensor function of the Tensor Loader component in Safetensors. An attacker can exploit this vulnerability remotely,...

HPE NonStop SNMP Trap Multiplexer buffer error vulnerability

The HPE NonStop SNMP Trap Multiplexer T1041L01^BAA and earlier versions contain a buffer error vulnerability stemming from a stack buffer overflow, which may lead to remote code execution...

David Eriksson Unshield buffer error vulnerability

David Eriksson’s Unshield versions 1.6.2 and earlier contain a buffer error vulnerability. This vulnerability stems from the Unshieldgetfiletable function, which allows for heap out-of-bounds reads without checking the offset of the cabinet header. An attacker could provide a specially crafted...

gstreamer1-plugins-bad-free Buffer Error Vulnerability

The gstreamer1-plugins-bad-free vulnerability involves a buffer overflow issue. This vulnerability arises from the incorrect calculation of the buffer size for UTF-16LE representations when writing string metadata tags containing BMP-external Unicode characters into ASF containers. This leads to...

HPE NonStop TMF Auditread2 buffer error vulnerability

The HPE NonStop TMF Auditread2 T2781L02^ANZ and earlier versions contain a buffer error vulnerability caused by a stack buffer overflow, which may lead to a denial of service...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux has a buffer error vulnerability, which stems from a double offset error in the log mapping calculation of DPDK lib/vhost, potentially leading to incorrect memory access...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 8, 9, and 10 have a buffer error vulnerability. This vulnerability stems from the software GSO library in DPDK, which does not check whether the header is suitable for the source segment or the target buffer when copying the packet header to the new mbuf...

OpenSIPS buffer error vulnerability

OpenSIPS versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 4.0.0, and 4.0.1 have a buffer error vulnerability. This vulnerability stems from the operation of the rtpproxyoffer/rtpproxyanswer functions in the rtpproxy component, which leads to out-of-bounds read access. This...

Paul Boersma Praat Buffer Overflow Vulnerability

Paul Boersma’s Praat 7.0.02 version has a buffer error vulnerability. This vulnerability stems from an incorrect operation of the whispermodelload function in the external/whispercpp/whisper.cpp file within the Model Loader component. This incorrect operation may lead to out-of-bounds write attac...