467 matches found
CVE-2026-77219 GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...
CVE-2026-77219 GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...
CVE-2026-77219
GNU Emacs before 31.0.91 is affected by an integer overflow in the PBM/PPM/PGM image loader . The loader multiplies image dimensions and channel count using signed integer arithmetic; for sufficiently large values the result wraps to a negative number, bypassing the bounds check and causing the p...
EUVD-2026-63643
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read...
CVE-2026-17060
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain a kernel heap over-read exploitable by an adjacent-network attacker with no privileges, yielding high confidentiality impact and denial of service. CVSS 8.1 HIGH; IBM PSIRT source. No exploitation details or patch versions provided in documents. Moni...
EUVD-2026-63653
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...
CVE-2026-54616
NanaZip (a 7-Zip derivative for modern Windows) is affected by a heap out-of-bounds read in the SquashFS LZ4 decompressor (Lz4Decode in SquashfsHandler.cpp). The root cause is that the function only rejects a zero return from LZ4_decompress_safe, while malformed input produces a negative error va...
PT-2026-79179
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read...
CVE-2026-72019
A flaw was found in the macsec component of the Linux kernel. When processing packets on the AFPACKET SOCKRAW + PACKETQDISCBYPASS transmit path, the macsecencrypt function attempts to read an unset Media Access Control MAC header. This leads to a 12-byte heap over-read, where sensitive data from...
CVE-2026-72019
In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsecencrypt macsecencrypt reads the Ethernet header via ethhdrskb skb-head + skb-macheader to memmove the 12 source/destination MAC bytes forward and make room for the SecTAG. On the...
CVE-2026-72019
CVE-2026-72019 affects the Linux kernel macsec path: macsec_encrypt() reads the Ethernet header via eth_hdr(skb) when skb->mac_header is unset on AF_PACKET SOCK_RAW + PACKET_QDISC_BYPASS, causing a 12-byte heap over-read and the frame’s outer MAC to be read on the wire. The issue occurs becaus...
EUVD-2026-58977
In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsecencrypt macsecencrypt reads the Ethernet header via ethhdrskb skb-head + skb-macheader to memmove the 12 source/destination MAC bytes forward and make room for the SecTAG. On the...
CVE-2026-72019 macsec: don't read an unset MAC header in macsec_encrypt()
In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsecencrypt macsecencrypt reads the Ethernet header via ethhdrskb skb-head + skb-macheader to memmove the 12 source/destination MAC bytes forward and make room for the SecTAG. On the...
CVE-2026-72019 macsec: don't read an unset MAC header in macsec_encrypt()
In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsecencrypt macsecencrypt reads the Ethernet header via ethhdrskb skb-head + skb-macheader to memmove the 12 source/destination MAC bytes forward and make room for the SecTAG. On the...
Linux Distros Unpatched Vulnerability : CVE-2026-72019
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - macsec: don't read an unset MAC header in macsecencrypt macsecencrypt reads the Ethernet header via ethhdrskb skb-head + skb-macheader to memmove the 12...
PT-2026-72208
In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsec encrypt macsec encrypt reads the Ethernet header via eth hdrskb skb-head + skb-mac header to memmove the 12 source/destination MAC bytes forward and make room for the SecTAG. On th...
Linux Distros Unpatched Vulnerability : CVE-2026-74324
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: validate skb length in testmode query In mt7925tmquery, the response skb from mt76mcusendandgetmsg is used in a memcpy without validating i...
CVE-2026-19082
Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...
UBUNTU-CVE-2026-19082
Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...
Updated python-django packages fix security vulnerabilities
The updated package fixes security vulnerabilities: Signed cookie salt namespace collision in django.http.HttpRequest.getsignedcookie. CVE-2026-6873 Potential unencrypted email transmission via STARTTLS in the SMTP backend. CVE-2026-7666 Potential exposure of private data via case-sensitive...