CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-2033 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-2033 Source advisory: OSV:GHSA-Q2R8-VMQ7-FPX2...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-2635 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-2635 Source advisory: OSV:GHSA-GQ3W-7JJ3-X7GR...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void edge_filtering_luma_internal<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5930237291724800 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

CVE-2026-24677 FreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

CVE-2026-24677

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

CVE-2026-24677

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

CVE-2026-24677 FreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

CVE-2026-24677

FreeRDP prior to 3.22.0 contains a vulnerability in ecam_encoder_compress_h264 that trusts server-controlled dimensions and does not validate the source buffer size, causing an out-of-bounds read in sws_scale. This is fixed in version 3.22.0. Affected releases include FreeRDP before 3.22.0; multi...

FreeRDP resource management error vulnerability

FreeRDP is an open-source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. Versions of FreeRDP prior to 3.22.0 contained a resource management vulnerability. This vulnerability stemmed from the ecamencodercompressh264 component’s reliance on server-controlled settings and th...

PT-2026-46026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the AMD display driver within the Linux kernel. The eng id variable is used as an index for the stream enc regs array, which contains only five...

PT-2026-21624

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the UIL and XPM image encoder does n...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6717528184520704 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_heic_fuzzer: Index-out-of-bounds in derive_collocated_motion_vectors

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6659568406167552 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash...

openSUSE 16 Security Update : jasper (openSUSE-SU-2026:20138-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20138-1 advisory. Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently hig...

SUSE SLES16 Security Update : jasper (SUSE-SU-2026:20200-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20200-1 advisory. Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2025-10279 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2025-10279 Source advisory: OSV:GHSA-4X5P-F36R-MXXR...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in residual_coding

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6269109842280448 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

OPENSUSE-SU-2026:20138-1 Security update for jasper

This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high bsc1247901. - CVE-2025-8836: Added some missing range checking on several coding parameters in the J...

SUSE-SU-2026:20200-1 Security update for jasper

This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high bsc1247901. - CVE-2025-8836: Added some missing range checking on several coding parameters in the J...