CVE-2026-106063

A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...

CVE-2026-33317

CVE-2026-33317 PoC de OP-TEE PKCS11 Este repositorio contiene la prueba de concepto del Mundo Normal, notas de reproducción y registros capturados para CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. El aviso oficial de OP-TEE describe una validación faltante en entrygetattributevalue para...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-14507 DESCRIPTION: IBM DataPower Gateway could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...

CVE-2026-81998

The software Substance3D - Modeler is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction , specifically where a victim must open a malicio...

CVE-2026-81980 Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81981 Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81981

Acrobat Reader is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The assigned CVSS 3.1 score is 7.8 (HIGH) with a local attack ...

CVE-2026-81983 Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-79908 Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-82005 Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Security Bulletin: IBM i is Affected By a Denial of Service in HTTP Server [CVE-2026-17272]

Summary IBM i is vulnerable to a denial of service from an out-of-bounds write CVE-2026-17272 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17272 DESCRIPTION: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of...

CVE-2026-14368: Out-of-bounds Write

The LwM2M JSON content formatter's getstring in subsys/net/lib/lwm2m/lwm2mrwjson.c copies a parsed JSON string into a caller-supplied buffer and NUL-terminates it. The length guard used if stringlength buflen, which accepts a string whose length is exactly buflen. After memcpy fills the whole...

CVE-2026-75749 Substance3D - Painter | Out-of-bounds Write (CWE-787)

Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-71382

Substance3D - Sampler (Adobe) is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires local access and user interaction , specifically the victim opening a maliciously crafted file. The vul...

CVE-2026-71382 Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48420 Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48419

Substance3D - Sampler by Adobe is affected by an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as the victim must open a malicious file. The vulnerability is rated CVSS 3.1: 7.8 (H...

CVE-2026-48426 Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48427 Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.4.3. Vulnerability Details CVEID:CVE-2026-71557 DESCRIPTION: go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized befor...