680 matches found
CVE-2026-114643
The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...
EUVD-2026-108303
The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...
CVE-2026-114643
The MongoDB C# Driver is vulnerable to a collision issue where it writes GeoJSON extra members without verifying if their names conflict with reserved members like type or coordinates. If an application allows user-supplied field names in these extra members, it can result in documents with dupli...
CVE-2026-114643 Duplicate geometry fields via unvalidated GeoJSON extra members
The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...
CVE-2026-114643 Duplicate geometry fields via unvalidated GeoJSON extra members
The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...
npm: Electron: Frame subscription trusts GPU-supplied frame geometry
npm: Electron: Frame subscription trusts GPU-supplied frame geometry vulnerability discovered by ? in WordPress npm electron versions 42.11.6...
npm: Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry
npm: Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry vulnerability discovered by ? in WordPress npm electron versions 42.11.6...
CVE-2026-112052
A flaw was found in libspatialite. An integer overflow in the Well-Known Binary WKB geometry parsing routines can lead to a Denial of Service DoS or memory corruption. By providing a specially crafted database file or geometry object with an excessively large point count, an attacker can trigger...
UBUNTU-CVE-2026-111130
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slidepositions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts,...
CVE-2026-111130
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slidepositions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts,...
CVE-2026-111130 OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slidepositions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts,...
EUVD-2026-102361
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slidepositions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts,...
CVE-2026-111130
OpenSlide versions through 4.0.1 are vulnerable to a heap out-of-bounds read in the MIRAX reader . The root cause involves crafted Slidedat.ini values where the CameraImageDivisionsPerSide does not evenly divide the image counts, leading to an out-of-bounds read of the slide_positions array. This...
CVE-2026-111130 OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slidepositions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts,...
Astra Linux – Vulnerability in CGal
There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...
Astra Linux – Vulnerability in CGal
There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...
Astra Linux – Vulnerability in CGal
There is a code execution vulnerability in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. There is also an oob read vulnerability in NefS2/SNCioparser.h: SNCioparser::readsface and storesmboundaryitem. A specially crafted malformed file can lead to an out-of-bounds read and typ...
Astra Linux – Vulnerability in CGal
There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted, malformed file can lead to an out-of-bounds read and type confusion, which may result in code execution. An attacker can provide malicious input to trigger a...
Astra Linux – Vulnerability in CGal
There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...
Astra Linux – Vulnerability in CGal
There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...