EUVD-2026-104856

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

CVE-2026-43855

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

gimp:2.8 security update

An update is available for module.pygtk2, pygobject2, module.gimp, module.pygobject2, module.python2-pycairo, python2-pycairo, pygtk2, gimp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RLSA-2026:84744 Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp:...

Siemens SIMATIC S7-1500 TM MFP Heap-based Buffer Overflow (CVE-2026-53362)

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

RockyLinux 10 : wireshark (RLSA-2026:84721)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:84721 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

Linux Distros Unpatched Vulnerability : CVE-2026-105016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-105016 Note that Nessus relies on the...

PT-2026-118291

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the decodeAsRGBA and decodeTile functions in src/libImaging/TiffDecode.c when processing a TIFF image whose unpacker row size exceeds the libtiff-decoded row size. An attacker can supply a malformed TIFF...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via tiffWriteProc in src/libImaging/TiffDecode.c when saving a TIFF image to a BytesIO object. The buffer size calculation uses state-size instead of the current write location state-loc when determining wheth...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the JPEG decoder in src/libImaging/JpegDecode.c when processing a JPEG stream whose declared output width or component count exceeds the dimensions used to size the scanline buffer. Because the buffer is...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the FlashPix JPEG tile decoding spanning src/PIL/FpxImagePlugin.py and src/libImaging/JpegDecode.c, where the tile buffer is sized from the rawmode that the MODES table selects from the FPX color IDs, while...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via ImagingJpegDecode in src/libImaging/JpegDecode.c when processing a JPEG file whose header declares scanlines wider or with more components than the tile extents used to size the scanline buffer. Because th...

CVE-2026-112275

A flaw was found in netpbm. An attacker could exploit this vulnerability by enticing a user to process a specially crafted Sun raster image file using the rasttopnm conversion utility. A heap-based buffer overflow in the run-length decoder allows out-of-bounds data to be written into memory...

CVE-2026-106547

A flaw was found in HDF5. An attacker could exploit this heap-based buffer overflow by providing a specially crafted HDF5 file to an application. Due to improper metadata validation when reading unallocated dataset chunks, the library writes data past the boundary of an allocated memory buffer...

DEBIAN-CVE-2026-112008

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow

A flaw was found in xorg-x11-server. The GLX OpenGL Extension to the X Window System interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially...

xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling

A flaw was found in xorg-x11-server. In the X Keyboard Extension XKB, key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-bas...

xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize

A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension XKB, the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially...

xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow

A flaw was found in xorg-x11-server. The GLX OpenGL Extension to the X Window System interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially...