CVE-2026-66040

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...

SUSE CVE-2026-63856

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

GHSA-H5R4-W88W-7CCR ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified

An invalid tiff:tile-geometry will cause a memory leak in the TIFF encoder...

GHSA-M596-67P7-69WH ImageMagick: Memory leak in VIFF encoder when allocation fails

When an allocation fails in the VIFF encoder a memory leak will occus...

GHSA-R628-69V2-2F9C ImageMagick: Memory Leak in MIFF encoder when allocaton fails

A memory leak will occur in the MIFF encoder when an allocation fails...

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

When an allocation fails in the TIFF encoder a small memory leak will occur...

GHSA-JFQ9-Q63X-RC63 ImageMagick: Memory Leak in TIFF encoder when an allocation fails

When an allocation fails in the TIFF encoder a small memory leak will occur...

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

When a blob can not be opened a memory leak will occur when encoding a JNG file...

GHSA-99W9-HV66-RFV7 ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

When a blob can not be opened a memory leak will occur when encoding a JNG file...

ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check

Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path...

GHSA-HC76-7MPC-QJQH ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797

An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder...

ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797

An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder...

GHSA-C4V7-W88G-M6C4 ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

Due to incorrect handling of arguments a heap buffer over-write can occur in the JP2 encoder...

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

Due to incorrect handling of arguments a heap buffer over-write can occur in the JP2 encoder...

OESA-2026-3141 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0,...

SUSE CVE-2026-63849

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v5.0.1 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

SUSE CVE-2026-63850

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v5.0.0 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

SUSE CVE-2026-63851

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v4.0.5 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

SUSE CVE-2026-63853

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v4.0 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit fd852c048b46f9825e904a4f3f4538fe9d8827...

CVE-2026-66040: Heap-based Buffer Overflow

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...