CVE-2026-65979

A flaw was found in OpenEXR's HTJ2K decoder. A local user could be tricked into opening a specially crafted EXR image file. When processed, the decoder reads beyond the bounds of an allocated buffer due to an unvalidated header length field. This out-of-bounds read can lead to a denial of service...

ovn: ovn: Heap Over-Read in ICMP Error Response Generation

When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length iptotlen for IPv4, ip6plen for IPv6 without validating it against the actual packet buffer size...

DEBIAN-CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...