The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to a countable amount of value loss. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML page...

Canva Affinity EMF File EMR_POLYDRAW Count Out-Of-Bounds Read Vulnerability

Talos Vulnerability Report TALOS-2025-2301 Canva Affinity EMF File EMRPOLYDRAW Count Out-Of-Bounds Read Vulnerability March 17, 2026 CVE Number CVE-2025-66000 SUMMARY An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an...

USN-8097-1 roundcube vulnerabilities

It was discovered that Roundcube Webmail did not properly sanitize the animate tag within SVG documents. An attacker could possibly use this issue to cause a cross-site scripting attack...

USN-8097-1: Roundcube Webmail vulnerabilities

It was discovered that Roundcube Webmail did not properly sanitize the animate tag within SVG documents. An attacker could possibly use this issue to cause a cross-site scripting attack...

CVE-2026-31899

A flaw was found in CairoSVG, an SVG converter. A remote attacker could exploit this vulnerability by submitting a specially crafted SVG file that contains recursive elements. This can lead to an exponential increase in processing time and CPU exhaustion, resulting in a Denial of Service DoS for...

Hunting CUDA Bugs at Scale with cuFuzz

GPUs play an increasingly important role in modern software. However, the heterogeneous host-device execution model and expanding software stacks make GPU programs prone to memory-safety and concurrency bugs that evade static analysis. While fuzz-testing, combined with dynamic error checking tool...

PT-2026-25769

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-65734

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file...

The vulnerability of the amdgpu_dpm_force_performance_level() function in the drivers/gpu/drm/amd/pm/amdgpu_dpm.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the amdgpudpmforceperformancelevel function in the drivers/gpu/drm/amd/pm/amdgpudpm.c file of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow...

The vulnerability of the dm_dmub_outbox1_low_irq() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c driver module of the Direct Rendering Infrastructure (DRI) support driver for AMD graphics cards in Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the dmdmuboutbox1lowirq function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c driver for AMD graphics cards’ kernel-based Linux operating system is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the DRM/Radeon kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/Radeon kernel component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of the DRM/amdgpu cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/amdgpu cores in the Linux operating system is related to reading data from buffers beyond their allowable limits. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the smu_v13_0_4_fini_smc_tables() function in the drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_4_ppt.c driver of the Direct Rendering Infrastructure (DRI) graphics card for AMD-based Linux operating systems allows a attacker to cause a system failure.

The vulnerability of the smuv1304finismctables function in the driver/gpu/drm/amd/pm/swsmu/smu13/smuv1304ppt.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper memory release mechanisms memory leaks. Exploiting this...

The vulnerability of the drm/xe/guc component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drm/xe/guc component in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a perpetrator to cause service failures...

The vulnerability of the sienna_cichlid_set_ppt_funcs() function in the drivers/gpu/drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c driver of the Direct Rendering Infrastructure (DRI) video card for Linux kernel allows a attacker to cause a system failure.

The vulnerability of the siennacichlidsetpptfuncs function in the drivers/gpu/drm/amd/pm/swsmu/smu11/siennacichlidppt.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to improper memory release mechanisms memory leaks. Exploiting thi...

The vulnerability of the console-based graphic editor ImageMagick, related to uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by using a malicious SVG file...

CVE-2025-65734

The learning management system gunet Open eClass is vulnerable to an authenticated arbitrary file upload in the Courses/Work Assignments module. This flaw exists in version v3.11 (and versions prior to v3.13 ) and allows an authenticated attacker to execute arbitrary code by uploading a specially...

The vulnerability of the `dc_destruct()` function in the `drivers/gpu/drm/amd/display/dc/core/dc.c` file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause a system failure.

The vulnerability of the dcdestruct function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to...

CVE-2026-31899

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input...

FreeRDP 安全漏洞

FreeRDP is an open-source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. Versions of FreeRDP prior to 3.24.0 contained security vulnerabilities. These vulnerabilities stemmed from the gdisurfacebits function not properly verifying the bmp.width and bmp.height values provid...