CVE-2026-56367

ImageMagick is affected in versions prior to 7.1.2-15 and 6.9.x prior to 6.9.13-40, where an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) can cause a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file may lead to information discl...

GHSA-685M-2W69-288Q protobuf.js: Denial of service through unbounded protobuf recursion

Summary protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields and generated decoding of nested message fields. A crafted protobuf binary payload could cause the JavaScript call stack to be exhausted during decoding...

CVE-2026-24857 bulk_extractor has Heap-based Buffer Overflow vulnerability

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in Unpack::CopyString, leading to a crash under ASAN and...

Sean Barrett stb_vorbis Buffer Overflow Vulnerability

Sean Barrett stbvorbis is a single-file public domain library based on C++. A buffer overflow vulnerability exists in the entire vorbis decoding path in Sean Barrett stbvorbis 1.12 and earlier. An attacker can exploit this vulnerability to corrupt memory, cause a denial of service, and execute a...