Lucene search
+L

4776 matches found

OSV
OSV
•added 2026/03/15 11:10 a.m.•14 views

OESA-2026-1603 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: Libsndfile =1.2.2 contains a memory leak vulnerability in the mpegl3encoderinit function within the...

5.3CVSS5.8AI score0.00374EPSS
SaveExploits1References2
OSV
OSV
•added 2026/03/15 11:10 a.m.•14 views

OESA-2026-1605 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: Libsndfile =1.2.2 contains a memory leak vulnerability in the mpegl3encoderinit function within the...

5.3CVSS5.8AI score0.00374EPSS
SaveExploits1References2
OSV
OSV
•added 2026/03/15 11:10 a.m.•16 views

OESA-2026-1606 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: Libsndfile =1.2.2 contains a memory leak vulnerability in the mpegl3encoderinit function within the...

5.3CVSS5.8AI score0.00374EPSS
SaveExploits1References2
OSV
OSV
•added 2026/03/15 11:10 a.m.•12 views

OESA-2026-1604 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: Libsndfile =1.2.2 contains a memory leak vulnerability in the mpegl3encoderinit function within the...

5.3CVSS5.8AI score0.00374EPSS
SaveExploits1References2
OSV
OSV
•added 2026/03/15 7:32 a.m.•13 views

OESA-2026-1625 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.1CVSS6.6AI score0.00654EPSS
SaveExploits0References17
OSV
OSV
•added 2026/03/15 7:32 a.m.•12 views

OESA-2026-1623 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.1CVSS6.6AI score0.00654EPSS
SaveExploits0References14
OSV
OSV
•added 2026/03/15 7:31 a.m.•9 views

OESA-2026-1622 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.1CVSS6.6AI score0.00654EPSS
SaveExploits0References17
OSV
OSV
•added 2026/03/13 7:54 p.m.•9 views

DEBIAN-CVE-2026-29078

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

7.5CVSS7.2AI score0.00478EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/13 7:54 p.m.•26 views

UBUNTU-CVE-2026-29078

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

8.2CVSS5.3AI score0.00478EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/13 5:18 p.m.•7 views

CVE-2026-29078 Integer Underflow in Lexbor ISO‑2022‑JP Encoder

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

8.2CVSS7.2AI score0.00478EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/13 5:18 p.m.•53 views

CVE-2026-29078 Integer Underflow in Lexbor ISO‑2022‑JP Encoder

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

8.2CVSS0.00478EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/13 5:18 p.m.•54 views

CVE-2026-29078

Lexbor CVE-2026-29078 affects the ISO-2022-JP encoder prior to version 2.7.0. The bug is caused by not resetting the temporary size variable between iterations, so ctx->buffer_used -= size with a stale size (3) underflows to SIZE_MAX. This underflow leads to memcpy called with a negative lengt...

8.2CVSS7.2AI score0.00478EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/03/13 5:18 p.m.•73 views

CVE-2026-29078

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

8.2CVSS5.8AI score0.00478EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/03/13 5:18 p.m.•25 views

EUVD-2026-12051

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

8.2CVSS5.8AI score0.00478EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/03/13 5:18 p.m.•29 views

CVE-2026-29078

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

8.2CVSS7.2AI score0.00478EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/13 5:02 p.m.•14 views

CVE-2026-32259

A flaw was found in ImageMagick. Processing a specially crafted file with the sixel encoder can cause a stack-based buffer overflow when a memory allocation fails, leading to a denial of service. Mitigation To mitigate this vulnerability, disable the vulnerable encoder by adding the following lin...

6.7CVSS6.9AI score0.0014EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/03/13 1:15 p.m.•14 views

SUSE CVE-2026-32259

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and...

6.7CVSS6.8AI score0.0014EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•5 views

CVE-2026-29078: Integer Underflow (Wrap or Wraparound)

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

8.2CVSS5.9AI score0.00478EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/13 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-32259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails i...

6.7CVSS6.7AI score0.0014EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/12 8:16 p.m.•11 views

CVE-2026-32259

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and...

6.7CVSS0.0014EPSS
SaveExploits0References1
Rows per page
Query Builder