CVE-2026-114041

FreeRDP versions prior to 3.32.1 on Windows are vulnerable to a heap out-of-bounds read in the client_cli_present_gateway_message function. The root cause is the improper passing of a byte count as a wide-character printf precision. This allows a malicious RD Gateway to send pre-authentication co...

Linux Distros Unpatched Vulnerability : CVE-2026-109242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile-current buffer is allocated...

Linux Distros Unpatched Vulnerability : CVE-2026-109448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, t...

PT-2026-120169

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF DIB synthesis because winpr read png from buffer allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr bitmap write buffer copies rows assuming one byte per pixel. A malicious RDP...

GHSA-Q45J-58J2-45RG Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

============================================================================ TiffDecode returns uninitialized memory as pixels for short JPEG strips Location: src/libImaging/TiffDecode.c:554 in decodeStrip Commit: a707c6b21c313880d0771e54965d142dd42358b6...

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

============================================================================ TiffDecode returns uninitialized memory as pixels for short JPEG strips Location: src/libImaging/TiffDecode.c:554 in decodeStrip Commit: a707c6b21c313880d0771e54965d142dd42358b6...

cve-2025-5777

CitrixBleed2 - CVE-2025-5777 PoC Scanner This repository contains an advanced Proof of Concept PoC scanner for CVE-2025-5777 , dubbed CitrixBleed2 , a memory disclosure vulnerability affecting Citrix NetScaler ADC and Gateway. I did some changes to the original poc, this script is based on resear...

EUVD-2026-104658

Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read...

GHSA-C6HW-5GRF-FF96 Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

============================================================================ OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels Location: src/libImaging/TiffDecode.c:483 in decodeTile Commit: a707c6b21c313880d0771e54965d142dd42358b6...

Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

============================================================================ OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels Location: src/libImaging/TiffDecode.c:483 in decodeTile Commit: a707c6b21c313880d0771e54965d142dd42358b6...

EUVD-2026-104642

Pillow: Heap buffer overflow in ImagingJpegDecode...

CVE-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274 Summary OpenSSL-src-rust is a source code and logic to build OpenSSL from source written in rust and packaged as a crate. There are currently two maintained branches, matching the two maintained OpenSSL versions whi...

DEBIAN-CVE-2026-112403

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

CVE-2026-43849

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...

DEBIAN-CVE-2026-112896

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved...

CVE-2026-43849

Technical details regarding the specific affected software, component, or version are not publicly available in the provided documents. The description only confirms a heap memory read vulnerability that could allow an attacker to exfiltrate sensitive data. Monitor for further updates.

CVE-2026-43849

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...

EUVD-2026-104850

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...

CVE-2026-109395 Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM...

CVE-2026-109395

The Ning compress-lzf library, in versions before 1.2.0 , is vulnerable to an out-of-bounds memory access within the sun.misc.Unsafe based UnsafeChunkDecoder . The root cause is a failure to properly validate back-references and literal runs during decompression. An attacker can provide a crafted...