20179 matches found
PT-2026-65968
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-27 Description The BGR decoder fails to verify the end-of-file at every location, which allows a specially crafted image to trigger a heap buffer over-read. A heap buffer over-read occurs when a program read...
Oracle Linux 8 : compat-libtiff3 (ELSA-2026-47183)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-47183 advisory. 3.9.4-16 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog ABGR decoding RHEL-189375 Tenable has extracted the preceding description block directly from t...
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: CVE-2026-61464: heap buffer overwrite when running an X11 import with a crafted window title bsc1271496. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:23036-1 Security update for libkrun
This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: selectnextproto use after free in rust-openssl bsc1270429. - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270198. - CVE-2026-41677: openssl: out-of-bound...
Important: Red Hat Security Advisory: gstreamer1-plugins-good security update
An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service
A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...
Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. ...
CVE-2026-14427
A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520113415...
ALSA-2026:47103 Important: libXfont2 security update
X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 libXfont2: PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 libXfont2: computeProps Property Buffer Heap Buffer Overflow CVE-2026-56003 For more details about...
ALSA-2026:47079 Important: libXfont2 security update
X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 libXfont2: PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...
ALSA-2026:47104 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in the DOM: Navigation...
CVE-2026-51266
CVE-2026-51266 is rejected/not used and does not represent an active vulnerability entry.
PT-2026-65509
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the host parsing logic. The dismantle host function parses untrusted host and URL input, and subsequent code uses clone from to copy parsed host, request host, extension and query string segments into fixed heap...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the configinput and denoisespatial functions of the vfhqdn3d filter, which sizes its working buffers for the initial frame dimensions and does not resize them when a later frame is larger. An attacker can...
CVE-2026-66758 Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images
A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...
CVE-2026-66758
CVE-2026-66758 affects GIMP’s file-fits plugin, where the cfitsio-based code uses signed 32-bit integer math for width/height. If a crafted FITS image sets both values large enough, their product overflows 32 bits, causing an undersized heap allocation and a subsequent heap-based buffer overflow ...
EUVD-2026-49402
A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...
CVE-2026-66758 Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images
A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...