875 matches found
pypdf: Possible large memory usage for wrong image dimensions
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. PatchesThis has been fixed in pypdf==6.14.0. WorkaroundsIf you cannot upgrade yet, consider...
PYSEC-2026-3611 pypdf: Possible large memory usage for wrong image dimensions
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consid...
PYSEC-2026-3587 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Summary Heap-buffer-overflow READ 16 bytes in Gemm76::adaptgemm76 onnx/versionconverter/adapters/gemm76.h:41 when ConvertVersion processes a model with a Gemm node whose input tensors have fewer than 2 dimensions. The adapter accesses Bshape1 without checking rank. On Release builds the OOB read ...
Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2012)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2012 advisory. Heap-buffer-overflow write in AVC444 YUV buffer allocation In libfreerdp/codec/h264.c, avc444ensurebuffer computes the AVC444 YUV444 intermediate buffer size as piDstSizex = piDstStridex...
python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile.open function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a...
python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile.open function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a...
CVE-2026-65423
A flaw was found in open62541. An integer overflow in the UAVariant arrayDimensions product computation may allow a remote attacker to trigger an out-of-bounds write. This could lead to arbitrary code execution or a denial of service DoS...
CVE-2026-63559
A flaw was found in open62541. An integer overflow in the UAVariant arrayDimensions product computation may allow a remote attacker to read memory outside of its allocated bounds. This could potentially lead to the disclosure of sensitive information...
EUVD-2026-51335
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the UAVariant arrayDimensions product computation process. An attacker can access out-of-bounds heap memory and potentially obtain sensitive information by sending specially crafted requests. Remediati...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the UAVariant arrayDimensions product computation process. An attacker can cause an out-of-bounds write by sending specially crafted input that triggers an integer overflow. Remediation Upgrade open625...
CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
DEBIAN-CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
UBUNTU-CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
DEBIAN-CVE-2026-63559
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
CVE-2026-63559
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
UBUNTU-CVE-2026-63559
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...