php-jpeg-injector

php-jpeg-injector Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it...

CVE-2026-126914

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/577346516...

CVE-2026-126894

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576950618...

CVE-2026-121084

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574214629 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application...

CLEANSTART-2024-AB89473 In the GD Graphics Library (aka LibGD) through 2

Security vulnerability affects the gd package. In the GD Graphics Library aka LibGD through 2...

CLEANSTART-2024-BA53680 When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2

Security vulnerability affects the gd package. When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2...

Skia graphics library Disclosure Protected Information

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge involves a buffer overflow in memory. Exploitation of this vulnerability enables a remote attacker to disclose protected information via a specially crafted HTML page...

CVE-2026-114723

A flaw was found in Roundcube Webmail. A remote attacker can cause a Denial of Service DoS by submitting a crafted image with excessively large dimensions. When thumbnail generation falls back to the GD graphics library on non-Windows platforms, available-memory checks are not enforced. This allo...

Skia graphics library Protected Information Access

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to insufficient validation of unusual or exceptional states. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Skia graphics library DoS

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to insufficient validation of unusual or exceptional states. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

CVE-2026-113163

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the Web Graphics Library WebGL component allows a remote attacker to execute arbitrary code within the application sandbox. By tricking a user into visiting a maliciously crafted web page, an attacker can exploit...

Astra Linux – Vulnerability in libgd2

The GD Graphics Library also known as LibGD in versions 2.3.2 and earlier has a vulnerability due to the lack of checks for the return values of gdGetBuf and gdPutBuf functions...

Astra Linux – Vulnerability in libgd2

The readheadertga function in gdtga.c within the GD Graphics Library also known as LibGD, as of 2.3.2, allows remote attackers to cause a denial of service out-of-bounds read through a crafted TGA file...

Astra Linux – Vulnerability in libgd2

In the gdgd2.c file of the GD Graphics Library also known as LibGD, the function gdImageGd2Ptr has a double-free issue starting from version 2.3. NOTE: The vendor’s stance is that the GD2 image format is a proprietary image format of LibGD. It should be considered obsolete and should only be used...

Astra Linux – vulnerability in Firefox and Thunderbird

A compromised web process was able to trigger out-of-bounds reads and writes in a more privileged process by using manipulated WebGL textures. This vulnerability has been fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

CVE-2026-93372

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser's security sandbox due to a buffer overflow in the Web Graphics Library WebGL component. An attacker can exploit this vulnerability by enticing a user to visit a specially crafted web...

CVE-2026-103629

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562038679...

AlmaLinux 9.2 [TuxCare] Security Update: gd / gd-devel / gd-progs (ALMALINUX9.2:CLSA-2026:1777301041)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777301041 advisory. - readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service...

CentOS Linux 8 [TuxCare] Security Update: gd / gd-devel / gd-progs (CENTOS-STREAM8:CLSA-2026:1777541021)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1777541021 advisory. - gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is The GD2...

CentOS Linux 6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1778055087)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1778055087 advisory. - An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child...