CVE-2026-116014

A flaw was found in open62541. This vulnerability allows a malicious Open Platform Communications Unified Architecture OPC UA server to trigger arbitrary code execution or a Denial of Service DoS on connecting client applications. By supplying specially crafted, oversized custom data type...

CVE-2026-111183

A flaw was found in GStreamer. A remote attacker can achieve arbitrary code execution by sending specially crafted Real-time Transport Protocol RTP stream packets to applications using the rtpL16depay plugin. This issue occurs due to a lack of proper validation on the length of incoming payload...

CVE-2026-120436

A flaw was found in Netpbm's jbigtopnm conversion utility. An integer overflow occurs when calculating output buffer dimensions for multi-plane JBIG Joint Bi-level Image Experts Group images with large header sizes, resulting in an undersized memory allocation. By convincing a user to process a...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms

Summary Multiple vulnerabilities were identified in third-party components and libraries used by CICS Transaction Gateway for Multiplatforms, including libexpat, GNU Debugger, Libevent, Jackson Databind, Jackson Core and Expat. To address these vulnerabilities, the affected components and librari...

CVE-2026-120431

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

EUVD-2026-115240

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation

A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...

Important: Red Hat Security Advisory: wireshark security update

An update for wireshark is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector

A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...

CVE-2026-109090

A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...

CVE-2026-109089

A flaw was found in libXi. A heap-based buffer overflow vulnerability occurs when the library processes DEVICERESOLUTION data received from an X Window System server. A malicious or compromised X server can send crafted responses to a connecting client application, potentially leading to arbitrar...

CVE-2026-116258

A flaw was found in libimobiledevice. A remote attacker can trigger a heap-based buffer overflow in the Apple File Conduit AFC component by sending specially crafted requests. Successful exploitation may result in a Denial of Service DoS through an application crash or memory corruption. Mitigati...

gimp: integer overflow when generating a thumbnail preview for a PSD file

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images

A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

CVE-2026-57192

A flaw was found in Asterisk. An authenticated remote attacker can cause a Denial of Service DoS via a heap-based buffer overflow in the Codec 2 audio decoder. Due to a sample-count calculation mismatch, an attacker can establish a call and transmit specially crafted audio packets to corrupt memo...

CVE-2026-57198

A flaw was found in Asterisk. In deployments where the chansip channel driver has text support enabled, an authenticated attacker can send specially crafted network packets to trigger a heap-based buffer overflow in the T.140 Redundant Data RED handling mechanism. This vulnerability could allow t...