Important: gdb

Issue Overview: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in...

PT-2026-102866

Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs affected versions not specified Description An uncontrolled format string issue exists in the affected interface, which could allow an unauthenticated remote attacker to execute arbitrary commands on the underlyin...

CVE-2026-76729: Use of Externally-Controlled Format String

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote...

Important: crash

Issue Overview: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in...

ALSA-2026:73425 Important: gdb security update

The GNU Debugger GDB allows debugging programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing their data. Security Fixes: gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 For more details about the...

Important: gdb security update

The GNU Debugger GDB allows debugging programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing their data. Security Fixes: gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 For more details about the...

ROS-20260929-73-0148

The vulnerability of the net/mlx5 component in the Linux operating system is related to insufficient handling of format strings. Exploiting this vulnerability can allow an attacker to cause a service failure...

RHEL 8 : gdb (RHSA-2026:73425)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73425 advisory. The GNU Debugger GDB allows debugging programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then...

Amazon Linux 2 : gdb (ALAS-2026-3958)

The version of gdb installed on the remote host is prior to 8.0.1-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3958 advisory. A flaw was found in GDB's STABS debug format parser. Thereadmemberfunctions function in gdb/stabsread.c contains a linkedlist removal...

Amazon Linux 2023 : gdb, gdb-gdbserver, gdb-headless (ALAS2023-2026-3142)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3142 advisory. A flaw was found in GDB's STABS debug format parser. Thereadmemberfunctions function in gdb/stabsread.c contains a linkedlist removal bug in the code that separates destructor and non- destructormember...

PT-2026-102873

🚨 CVE-2026-76729 A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service...

morgan vulnerable to Log Injection via unescaped double quote in quoted log fields

Impact Morgan writes attacker-controlled request data to the access log. Its escaping added in 1.11.0 and 1.12.0 neutralizes control characters, the Unicode line separators, and backslash, but not the double quote 0x22, which is the field delimiter of the Apache combined log format morgan emits. ...

EUVD-2026-76027

morgan vulnerable to Log Injection via unescaped double quote in quoted log fields...

CVE-2026-102271

A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. The gdcmFilenameGenerator component, used by the gdcmraw command-line tool to generate output filenames for split fragments, is...

The vulnerability of the TACACS+ protocol implementation in the tac_plus authentication daemon allows a perpetrator to execute any code with root privileges.

The vulnerability of the TACACS+ protocol implementation in the tacplus authentication daemon is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges...

[SECURITY] Fedora 44 Update: libheif-1.23.5-3.fc44

libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...

CVE-2026-85750

Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...

EUVD-2026-87094

Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...

CVE-2026-85750 Piwigo arbitrary file read and remote code execution via insecure image processing

Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...