CVE-2026-106572

A flaw was found in ImageMagick. A remote attacker can trigger a Denial of Service DoS by submitting a specially crafted Continuous Acquisition and Life-cycle Support CALS raster image for processing. Due to a missing recursion depth limit in the CALS decoder, parsing the malicious file exhausts...

ish

iSH Un proyecto para ejecutar un shell de Linux en iOS, utilizando emulación x86 en modo usuario y traducción de llamadas al sistema. Para el estado actual del proyecto, consulta la pestaña de issues y los registros de commits. Página de App Store Beta de TestFlight Servidor de Discord Wiki con...

EUVD-2026-94391

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

CVE-2026-106571

The ImageMagick image manipulation software is vulnerable to a Heap Buffer Over-Write in the GetVirtualPixels API . This flaw is caused by an integer calculation error that can occur when processing a crafted local call, leading to a write beyond the heap buffer and causing the server process to ...

CVE-2026-106571 ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixe...

CVE-2026-106571 ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixe...

IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution

IBM Aspera Faspex through 4.4.2 Patch Level 1 is susceptible to remote code execution via a YAML deserialization flaw. This can allow an attacker to send a specially crafted obsolete API call and thereby execute arbitrary code, obtain sensitive data, and/or execute other unauthorized operations...

The vulnerability of the DMOP call processing code in Xen hypervisors allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. [source-iocs-preserved const=DM_OP]

The vulnerability of the DMOP call processing code in Xen hypervisors is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-107590

Name of the Vulnerable Software and Affected Versions Homer versions prior to 11.0.283 Description The V4StatisticsQuery handler fails to call the sqlvalidator.ValidateRawSQL function when processing the user-supplied rawquery field, passing it directly to DuckDB. This allows an authenticated use...

EUVD-2026-93971

StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through decodeValue without enforcing a maximum nesting depth. A sufficiently deep structure exhausts the JavaScript call...

Vyper: Call stack corruption when passing complex type containing non-base type members as argument

Impact When we pass a multi-dimensional array like 1, 2, 3, 4 as an argument to internal/external functions we get incorrect output. This is due to a stack management issue, because it was assumed that the size of each subtype of an array/struct is 32, which is not always correct. Example code:...

GHSA-4V7V-GQF9-WW2G Vyper: Call stack corruption when passing complex type containing non-base type members as argument

Impact When we pass a multi-dimensional array like 1, 2, 3, 4 as an argument to internal/external functions we get incorrect output. This is due to a stack management issue, because it was assumed that the size of each subtype of an array/struct is 32, which is not always correct. Example code:...

GHSA-VG88-3V92-RJX2 Vyper: Return inside for loop more than 1 level deep

VVE-2020-0002 Earlier today, we received a responsible disclosure of a potential issue from @michwill developer of @curvefi for Vyper users who use return statements inside for loops of nested internal calls. Returning inside a for loop causes an invalid jump dest, reverting the transaction...

AZL-106266 CVE-2026-98301 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. brmstsetstate calls switchdevportattrset for nonzero MSTIs while holding rcureadlock which invokes the blocking...

DEBIAN-CVE-2026-98273

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CALL instructions When using eBPF to probe CS CALL instructions within a function, a crash can be triggered. The eBPF tool probes offset 257 of the hrtimerrunqueues function: : nopl...

AZL-106356 CVE-2026-98273 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CALL instructions When using eBPF to probe CS CALL instructions within a function, a crash can be triggered. The eBPF tool probes offset 257 of the hrtimerrunqueues function: : nopl...

CVE-2026-98273

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CALL instructions When using eBPF to probe CS CALL instructions within a function, a crash can be triggered. The eBPF tool probes offset 257 of the hrtimerrunqueues function: : nopl...

UBUNTU-CVE-2026-98273

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CALL instructions When using eBPF to probe CS CALL instructions within a function, a crash can be triggered. The eBPF tool probes offset 257 of the hrtimerrunqueues function: : nopl...

CVE-2026-98273

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CALL instructions When using eBPF to probe CS CALL instructions within a function, a crash can be triggered. The eBPF tool probes offset 257 of the hrtimerrunqueues function: : nopl...

CVE-2026-98273 x86/kprobes: Fix crash when probing CS CALL instructions

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CALL instructions When using eBPF to probe CS CALL instructions within a function, a crash can be triggered. The eBPF tool probes offset 257 of the hrtimerrunqueues function: : nopl...