CVE-2026-16465

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information...

CVE-2026-16463

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2026-16463 DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2026-16463 DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2026-16463

This CVE affects Autodesk AutoCAD when parsing a malicious DXF file, causing a Heap-Based Overflow in the DXF parser. The underlying flaw can crash the process, read sensitive data, or allow arbitrary code execution in the context of the current process. The CVSS metrics provided indicate a Local...

CVE-2026-54082 veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs

veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity vulnerability in PDFAValidator.validate... and GFPDAcroForm.getdynamicRender, where default DocumentBuilderFactory parsing of...

JLSEC-2026-806 Reading malicious EXR files can cause out-of-bounds writes

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Versions 3.4.0 through 3.4.9 have a signed integer overflow vulnerability in OpenEXR's HTJ2K High-Throughput JPEG 2000 decompression path. The htundoimp...

CVE-2026-55737

A flaw was found in Erlang OTP. A remote attacker can exploit a vulnerability in the Erlang external term format ETF decoder by providing a specially crafted binary to the binarytoterm/1 function. This manipulation of data types during processing can corrupt the system's memory, leading to an...

CVE-2026-64322

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. The udfloadsparablemap function incorrectly validates the length of the sparing table, treating it as a byte count instead of an entry count. This allows a local attacker, by providing a specially crafted UDF image, to...

PT-2026-65964

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists during the parsing of TIF files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...

Linux Distros Unpatched Vulnerability : CVE-2026-59943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can...

PT-2026-65959

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists during the parsing of TIF files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...

PT-2026-65962

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the parsing of TIF files allows remote attackers to execute arbitrary code. The issue occurs due to insufficient validation of user-supplied data, leading to an integer overflow—a...

PT-2026-65818

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A heap-based overflow occurs when Autodesk AutoCAD parses a maliciously crafted DXF file. This issue allows an attacker to cause a system crash, read sensitive information, or execut...

SUSE SLES15 Security Update : yq (SUSE-SU-2026:3327-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3327-1 advisory. Update to v4.53.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass a...

PT-2026-65819

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description An Out-of-Bounds Read occurs when the software reads data outside the intended boundary of a buffer. This issue is triggered when Autodesk AutoCAD parses a maliciously crafted DWG or...

libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties

A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...

libXfont2: PCF Font Parsing Heap Buffer Overflow

A flaw was found in libXfont2. A specially crafted PCF Portable Compiled Format font file, when processed by libXfont2, can lead to a buffer overflow. This occurs because the font parsing process does not properly validate the size of a bitmap buffer against the glyph metrics provided in the...

CVE-2026-48372

Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48372 Format Plugins | Heap-based Buffer Overflow (CWE-122)

Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...