CVE-2026-47254

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, Track::initsampletimingtable in libheif/sequences/track.cc stores an out-of-bounds chunk index mchunks.size into mpresentationtimeline when the number of chunks defined in the stco box is less than the number of...

CVE-2026-45382

libde265 prior to v1.0.19 contains a heap-buffer-overflow read in decode_slice_unit_tiles caused by unvalidated PPS tile geometry (ctbAddrRS computed from PPS colBd/rowBd without ensuring it fits CtbAddrRStoTS.size() == sps->PicSizeInCtbsY). A malformed PPS that passes set_derived_values but e...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

CVE-2026-63881

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver debugger component. The getqueueids function, responsible for handling queue identifiers, contains an integer overflow vulnerability. This occurs when calculating the size of an array, where a malicious local user could provide a...

Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270542. CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrapkey bsc1270705. CVE-2026-41681:...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2746)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit...

EulerOS Virtualization 2.10.0 : perl (EulerOS-SA-2026-2864)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit...

SUSE-SU-2026:3140-1 Security update for libreoffice

This update for libreoffice fixes the following issues: Update to LibreOffice 26.2.5.1. Security issues fixed: - CVE-2026-4430: out-of-bounds write via crafted OOXML documents with mismatched encryption salt parameters bsc1264357. - CVE-2026-6039: denial of service via specially crafted DXF...

chromium-browser: libyuv: chromium-browser: Heap buffer overflow in libyuv

A heap buffer overflow flaw was found in the libyuv component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514748734...

SUSE-SU-2026:3137-1 Security update for 389-ds

This update for 389-ds fixes the following issues: Update to version 2.2.10git255.752643c78. Security issues fixed: - CVE-2026-11610: missing bounds check in sasliorecv can lead to a heap buffer overflow when processing a specially crafted oversized LDAP UNBIND packet bsc1270695. - CVE-2026-11611...

USN-8560-1 libxfont vulnerabilities

It was discovered that libXfont incorrectly handled scaling bitmap fonts, leading to a heap buffer overflow. An attacker able to access the X server could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2026-56001 It was...

Important: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Linux Distros Unpatched Vulnerability : CVE-2026-64620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard...

OESA-2026-3060 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7-Zip < 26.01 NTFS Heap Buffer Overflow (GHSL-2026-140)

The version of 7-Zip installed on the remote Windows host is prior to 26.01. It is, therefore, affected by a vulnerability: - A heap buffer overflow vulnerability exists in the NTFS archive handler. The CInStream::GetCuSize function computes the compression-unit buffer size using a 32-bit shift...

CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...

Alibaba Cloud Linux 3 : 0194: libreoffice (ALINUX3-SA-2026:0194)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0194 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-8357: LibreOffice Calc compiles cell...

CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

UBUNTU-CVE-2026-61464

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service...