CVE-2026-28688

CVE-2026-28688 is a heap-use-after-free in ImageMagick’s MSL encoder where a cloned image is destroyed twice. The vulnerability affects ImageMagick prior to versions 7.1.2-16 and 6.9.13-41, and is addressed by upgrading to 7.1.2-16 or 6.9.13-41 (per the CVE description). Connected advisories (Deb...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

CVE-2021-47316 nfsd: fix NULL dereference in nfs3svc_encode_getaclres

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix NULL dereference in nfs3svcencodegetaclres In error cases the dentry may be NULL. Before 20798dfe249a, the encoder also checked dentry and dreallyispositivedentry, but that looks like overkill to me--zero status should ...