PT-2026-39398

HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow condition. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on...

PT-2026-39369

HDF5 Library through 1.14.3 has a heap buffer overflow in H5S point deserialize in H5Spoint.c...

PT-2026-39341

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG cache heap deserialize, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

PT-2026-39338

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG read, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

PT-2026-39367

HDF5 Library through 1.14.3 has a heap buffer overflow in H5O mtime new encode in H5Omtime.c...

PT-2026-39383

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM memcpyvv function...

CVE-2026-7353

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-7353

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in generic_unpack

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5696093731225600 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflo...

sentencepiece:model_load_fuzzer: Heap-buffer-overflow in sentencepiece::unigram::Model::EncodeOptimized

Project: https://github.com/google/sentencepiece.git Detailed Report: https://oss-fuzz.com/testcase?key=4785445505662976 Project: sentencepiece Fuzzing Engine: libFuzzer Fuzz Target: modelloadfuzzer Job Type: libfuzzerasansentencepiece Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

CVE-2026-7353: Heap-based Buffer Overflow

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-35853

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.138 Description A heap buffer overflow in Skia allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. A heap buffer...

CVE-2026-7339: Heap-based Buffer Overflow

Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Fedora 44 : libpng12 (2026-3adf4e38cb)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3adf4e38cb advisory. fix CVE-2026-25646: heap buffer overflow in pngsetquantize Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2026-20766 Milesight Cameras Heap-based Buffer Overflow

An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-buffer-overflow in Read

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5134971554824192 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x74de560f7741...

vlc:vlc-demux-dec-libfuzzer-nuv: Heap-buffer-overflow in dav1d_backup_ipred_edge_16bpc

Detailed Report: https://oss-fuzz.com/testcase?key=4643851439767552 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-nuv Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7de28f824400 Crash State:...

freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. The gdisurfacebits function, which processes SURFACEBITSCOMMAND messages, does not properly validate image dimensions bmp.width and bmp.height provided by a malicious RDP server. This can lead to a heap buffer...

freerdp: FreeRDP heap-buffer-overflow

A heap based buffer overflow has been discovered in FreeRDP. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS PDUs...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...