CLEANSTART-2024-HY25374 When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack

Security vulnerability affects the firefox package. When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack...

CLEANSTART-2024-IM54605 When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed

CVE-2022-36319 affects multiple packages. When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. See references for individual vulnerability details...

PYSEC-2026-4218 geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point

Impact geopy.Point and Point.fromstring may take excessive CPU time when parsing long, malformed coordinate strings due to inefficient regular-expression behavior. The numeric Point constructor is not affected. Geocoders' reverse methods called with string inputs exercise the vulnerable path...

PT-2026-111533

Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redirection enabled...

Denial-of-service (DoS)

geopy is vulnerable to a Denial-of-service DoS. The vulnerability is due to excessive CPU consumption when parsing long, malformed coordinate strings, which allows an attacker to cause denial of service by repeatedly sending attacker-controlled requests containing crafted input...

GHSA-MHVH-FQ92-PFMR geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point

Impact geopy.Point and Point.fromstring may take excessive CPU time when parsing long, malformed coordinate strings due to inefficient regular-expression behavior. The numeric Point constructor is not affected. Geocoders' reverse methods called with string inputs exercise the vulnerable path...

SUSE CVE-2019-7621

Kibana versions before 6.8.6 and 7.5.1 contain a cross site scripting XSS flaw in the coordinate and region map visualizations. An attacker with the ability to create coordinate map visualizations could create a malicious visualization. If another Kibana user views that visualization or a dashboa...

CVE-2026-77387 geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point

geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.fromstring can spend excessive CPU time due to inefficient regular-expression behavior when an application passes a long malformed coordinate string without the 256-character input limit used by the fix. Geocoder rever...

PT-2026-94593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbdev kyro driver where overlay viewport end coordinates are calculated using 32-bit unsigned arithmetic. Large input values can lead to integer wraparound before...

CVE-2026-82428: Improper Limitation of a Pathname to a Restricted Directory

Description Dependency artifacts uploaded with storm jar --artifacts were stored under a blob key derived only from the Maven coordinate, for example dep---.jar. The key was therefore identical for every user of the cluster and predictable in advance. When the blob already existed, the uploader...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nss (UTSA-2026-090158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090158 advisory. When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel...

CLSA-2026-1788270342 poppler: Fix of CVE-2024-56378

fix CVE-2024-56378 signed row-coordinate overflow in JBIG2Bitmap::combine...

CVE-2026-59189

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.12, the documented TypedDeepImageChannel::row API can return an out-of-bounds pointer when a deep imag...

CVE-2026-59189 OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.12, the documented TypedDeepImageChannel::row API can return an out-of-bounds pointer when a deep imag...

CVE-2026-59189

OpenEXRUtil (the reference implementation for the EXR image format used in the motion picture industry) is affected in versions 3.3.0–3.3.12 and 3.4.0–3.4.12 by a heap out-of-bounds read in the TypedDeepImageChannel::row() API. The root cause is a conflict between two coordinate models: at(x, y) ...

CVE-2026-55059

A flaw was found in OpenEXR, a widely used library for the EXR image format. A user processing a specially crafted image file could trigger a heap out-of-bounds write vulnerability in the SampleCountChannel::set function. This occurs due to an incorrect computation of the target Y coordinate,...

CVE-2026-55059 OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059 OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059 OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059

OpenEXR (the reference implementation for the EXR deep image format) versions prior to 3.2.10, 3.3.12, and 3.4.13 contain a heap out-of-bounds write in Imf_4_0::SampleCountChannel::set(). The root cause is that the row-based sample-count setter computes the target Y coordinate using dataWindow.mi...