8 matches found
SUSE CVE-2026-92446
gxbinresthemeload and gxbinresfontload take the resource as a bare GXUBYTE with no length, and GXBINRESDATAINFO has no field to carry one. Every read is therefore performed at an offset the file itself chose, against a buffer whose extent the loader does not know. A resource that declares more da...
CVE-2026-92446
gxbinresthemeload and gxbinresfontload take the resource as a bare GXUBYTE with no length, and GXBINRESDATAINFO has no field to carry one. Every read is therefore performed at an offset the file itself chose, against a buffer whose extent the loader does not know. A resource that declares more da...
CVE-2026-92446
The GUIX binary resource loader contains an out-of-bounds read vulnerability within the gx_binres_theme_load() and gx_binres_font_load() functions. The root cause is that these functions accept resources as a bare GX_UBYTE * without a length, and the GX_BINRES_DATA_INFO structure lacks a field to...
CVE-2026-92446 GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader
gxbinresthemeload and gxbinresfontload take the resource as a bare GXUBYTE with no length, and GXBINRESDATAINFO has no field to carry one. Every read is therefore performed at an offset the file itself chose, against a buffer whose extent the loader does not know. A resource that declares more da...
CVE-2026-92446 GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader
gxbinresthemeload and gxbinresfontload take the resource as a bare GXUBYTE with no length, and GXBINRESDATAINFO has no field to carry one. Every read is therefore performed at an offset the file itself chose, against a buffer whose extent the loader does not know. A resource that declares more da...
CVE-2026-92446 GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader
gxbinresthemeload and gxbinresfontload take the resource as a bare GXUBYTE with no length, and GXBINRESDATAINFO has no field to carry one. Every read is therefore performed at an offset the file itself chose, against a buffer whose extent the loader does not know. A resource that declares more da...
EUVD-2026-105037
gxbinresthemeload and gxbinresfontload take the resource as a bare GXUBYTE with no length, and GXBINRESDATAINFO has no field to carry one. Every read is therefore performed at an offset the file itself chose, against a buffer whose extent the loader does not know. A resource that declares more da...
Eclipse ThreadX GUIX buffer error vulnerability
Eclipse ThreadX GUIX versions 6.5.1.202602a and earlier contain a buffer error vulnerability. This vulnerability arises because gxbinresthemeload and gxbinresfontload handle resources as GXUBYTE without specifying their length; moreover, GXBINRESDATAINFO lacks a field to record this length. As a...