PT-2026-70641

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70493

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A heap-based buffer overflow in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70475

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. This issue is related to improper object management within the UMPDDrvBitBlt...

PT-2026-70556

Name of the Vulnerable Software and Affected Versions Reliable Multicast Transport Driver RMCAST affected versions not specified Description A heap-based buffer overflow occurs in the Reliable Multicast Transport Driver RMCAST, which is a driver used for transmitting data to multiple recipients...

ImageMagick 7.x < 7.1.2-27 Multiple Vulnerabilities

The remote host has a version of ImageMagick 7.x installed that is prior to 7.1.2-27. It is, therefore, affected by multiple vulnerabilities: - The BGR decoder does not check for an end-of-file in every location so a crafted image could result in a heap buffer over-read. CVE-2026-64685 - A heap...

PT-2026-70669

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

CVE-2026-11809 UpdateHub probe: uninitialized-heap out-of-bounds read of network-supplied metadata

The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in zimplupdatehubprobe. The probe response from the UpdateHub server is copied into a heap buffer metadata that is correctly NUL-terminated, but a second buffer metadatacopy is...

SUSE-SU-2026:3562-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-27951: 32-bit system denial of service via endless blocking loop in StreamEnsureCapacity bsc1258939. - CVE-2026-33952: client denial of service via unvalidated authentication length field bsc1261196. - CVE-2026-33977: client denial of...

SUSE-SU-2026:23049-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-58050: heap buffer...

SUSE-SU-2026:3541-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-58050: heap buffer...

Security update for perl

This update for perl fixes the following issues: CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds bsc1266304. CVE-2026-12087: Socket's packipmreqsource can copy adjacent heap memory into the returned packed structure bsc1268349...

CVE-2026-59087 Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation

A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted Seattle Filmworks file. This could lead to a heap overflow, allowing the attacker ...

CVE-2026-71393

GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in a...

CVE-2026-71393 Heap Buffer Overflow in GNU Emacs for Android

GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in a...

CVE-2026-71392

GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can...

CVE-2026-71392 Integer Overflow in GNU Emacs for Android

GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can...

Astra Linux – Vulnerability in binutils

A flaw was discovered in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF Extended Common Object File Format object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: fix OOB read in decodechoice In decodechoice, the boundary check before getlen uses the variable len, which remains 0 after initialization at the beginning of the function: unsigned int type, ext, len ...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in PDFium in Google Chrome prior to version 147.0.7727.101 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: High...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, there was a heap buffer over-read vulnerability when processing images with small dimensions using the -wavelet-denoise operator. Versions 7.1.2-15 and 6.9.13-4...