Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. ...

CVE-2026-51266

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the HTTP request header construction logic. The application dynamically splices attacker-controlled host name, path, query string, and multiple HTTP header fields into a fixed psptr heap buffer without proper size...

CVE-2026-51266

The CVE-2026-51266 entry concerns schreibfaul1 ESP32-audioI2S 3.4.5. The vulnerability is a heap-based buffer overflow in the HTTP request header construction logic, where attacker-controlled host, path, query string, and multiple HTTP header fields are spliced into a fixed ps_ptr heap buffer wit...

CVE-2026-51271

In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the WAV header parsing function readWAVHeader. The function reads untrusted chunk size and bytes-to-skip value directly from malicious WAV files without reasonable range restriction. Abnormally large bts an...

PT-2026-65509

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the host parsing logic. The dismantle host function parses untrusted host and URL input, and subsequent code uses clone from to copy parsed host, request host, extension and query string segments into fixed heap...

EUVD-2026-49402

A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...

CVE-2026-66758

CVE-2026-66758 affects GIMP’s file-fits plugin, where the cfitsio-based code uses signed 32-bit integer math for width/height. If a crafted FITS image sets both values large enough, their product overflows 32 bits, causing an undersized heap allocation and a subsequent heap-based buffer overflow ...

CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

CVE-2026-8484

A flaw was found in Jansi. A heap buffer overflow vulnerability exists in the Jansi Java Native Interface JNI 'ioctl' wrapper. This is due to a lack of size verification for the argument array before the system call, which can lead to heap corruption. An attacker could exploit this to cause...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the morphology when an invalid kernel is provided. An attacker can cause a heap buffer overwrite by supplying a specially crafted kernel. Remediation A fix was pushed into the master branch but not yet...

GHSA-F5M7-CQGW-8HM7 ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel...

GHSA-76Q6-2P6H-XJQR ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title

Running an X11 import with a crafted window title can result in a heap buffer over-write...

EUVD-2026-41124

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments...

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

Due to incorrect handling of arguments a heap buffer over-write can occur in the JP2 encoder...

EUVD-2026-48452

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...

MGASA-2026-0290 Updated socat package fixes a security vulnerability

The updated package fixes a security vulnerability: Heap Buffer Overflow via SOCKS5 Reply Parser. CVE-2026-56123...

CVE-2026-64830

FFmpeg up to 8.1.2 contains a heap buffer overflow in the VobSub subtitle demuxer. A malicious .sub/.idx file with more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c can cause unbounded writes beyond the vobsub->q[] boundary via ff_subtitles_queue_insert(), potenti...

Security update for ImageMagick

This update for ImageMagick fixes the following issues CVE-2026-56375: possible memory leak in ASHLAR coder when action fails bsc1271495. CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title bsc1271496. CVE-2026-61859: policy bypass in script operation due to missing chec...