CVE-2026-93587 ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...

CVE-2026-93587 ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...

CVE-2026-93587

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD (also affecting CUBE and HALD) coder. When a specific command-line option is supplied, the decoder fails to enforce a configured resource limit, resulting in excessive memory allocation . A local user able to pas...

CVE-2026-86289

A flaw was found in Ollama's GGUF Decoder component. A remote attacker can exploit an integer overflow vulnerability in the readGGUFV1String function by performing a manipulation. This could lead to a denial of service DoS, making the affected system unavailable. Mitigation To mitigate this issue...

CVE-2026-93575

A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowing an attacker to bypass size limits...

CVE-2026-84450: Reachable Assertion

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a clap property and an ispe width or height greater than INT32MAX + 1 can reach crop calculations through heifimagehandlegetimagetiling. Boxclap::leftrounded or Boxclap::toprounde...

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2026-3709)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a hea...

EulerOS 2.0 SP10 : shim (EulerOS-SA-2026-3770)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2026-3702)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image...

CVE-2026-57228: Out-of-bounds Read

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...

Linux Distros Unpatched Vulnerability : CVE-2026-92484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/region: Fix use-after-free in findposandways error path The error path releases its reference to a switch decoder before logging an error that includes the...

CVE-2026-93564: Undefined Security Weakness

A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send specially crafted PROXY-protocol v2 headers. This can lead to memory exhaustion, resulting in a Denial of Service DoS for the affected system...

CVE-2026-93562: Undefined Security Weakness

A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls ...

CVE-2026-93573: Inconsistent Interpretation of HTTP Requests

A flaw was found in Netty's HTTP/1.1 decoder. This vulnerability allows a remote attacker to bypass Transfer-Encoding header validation by splitting the Transfer-Encoding field across multiple headers, with the last field containing a non-final transfer coding like gzip or deflate. This bypass ca...

PT-2026-95697

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the HTTP/1 decoder allows remote attackers to perform HTTP request smuggling due to incomplete validation of malformed Transfer-Encoding headers. By sending specially crafted HTTP...

The vulnerability of the decoder in open-source libraries for working with protobuf and GRPC Wire allows attackers to induce a service failure.

The vulnerability of the decoder in open-source libraries for working with protobuf and GRPC Wire is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2026-3756)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a hea...

CVE-2026-54692 SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

CVE-2026-54692 SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

CVE-2026-54627

SAIL is a cross-platform image library. In versions 0.9.10 and earlier , a mode/depth mismatch in the PSD decoder allows a crafted PSD to trigger a heap out-of-bounds write : psd_private_sail_pixel_format() resolves a one-channel Bitmap-mode PSD to a one-bit pixel format, while sail_codec_load_fr...