CVE-2026-35203: Out-of-bounds Read

ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple fields from the RTP payload based on flag bits in the first byte, without verifying that sufficient data exists in the buffer. A crafted VP9 RTP packet with a 1-byte payload 0xFF,...

openFPGALoader 缓冲区错误漏洞

openFPGALoader is a general-purpose FPGA programming tool developed by Gwenhael Goavec-Merou. Versions of openFPGALoader prior to 1.1.1 contained a buffer error vulnerability. This vulnerability stems from the POFParser::parseSection function, which involves heap buffer overflows during reading,...

CVE-2026-35170: Out-of-bounds Read

openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in BitParser::parseHeader that allows out-of-bounds heap memory access when parsing a crafted .bit file. No FPGA hardware is required to trigger this vulnerability...

PT-2026-32989

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499446092 Crash type: Heap-buffer-overflow READ 1 Crash state: regsub format replace format expand1...

PT-2026-34528

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499447432 Crash type: Heap-buffer-overflow READ 1 Crash state: cram encode container cram flush container mt cram close...

AlmaLinux 8 : libpng12 (ALSA-2026:6445)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:6445 advisory. libpng: LIBPNG has a heap buffer overflow in pngsetquantize CVE-2026-25646 Tenable has extracted the preceding description block directly from the AlmaLinux securi...

Linux Distros Unpatched Vulnerability : CVE-2026-34979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer...

AlmaLinux 8 : libpng15 (ALSA-2026:6439)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:6439 advisory. libpng: LIBPNG has a heap buffer overflow in pngsetquantize CVE-2026-25646 Tenable has extracted the preceding description block directly from the AlmaLinux securi...

freetype2:truetype-render-i35: Heap-buffer-overflow in TT_RunIns

Detailed Report: https://oss-fuzz.com/testcase?key=6392263185072128 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: truetype-render-i35 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7b21dabe1888 Crash State: TTRunIns...

htslib:hts_open_fuzzer: Heap-buffer-overflow in cram_encode_container

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5372748074647552 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

tmux:cmd-parse-fuzzer: Heap-buffer-overflow in regsub

Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=5049488099311616 Project: tmux Fuzzing Engine: afl Fuzz Target: cmd-parse-fuzzer Job Type: aflasantmux Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7537a40e0480 Crash State:...

AZL-81813 CVE-2026-34979 affecting package cups for versions less than 2.4.17-1

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly...

harfbuzz:hb-gpu-fuzzer: Heap-buffer-overflow in hb_gpu_draw_encode

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6336503637934080 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-gpu-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

CLSA-2026-1775148022 binutils: Fix of 3 CVEs

CVE-2025-66862: fix heap-buffer-overflow in gnuspecial in cplus-dem.c - CVE-2025-66863: fix SEGV in ddiscriminator in cp-demangle.c - CVE-2025-66865: fix stack overflow in dprintcomp in cp-demangle.c...

OESA-2026-1823 gstreamer1-plugins-bad-free security update

GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good...

OESA-2026-1822 gstreamer1-plugins-bad-free security update

GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in str2ullong

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6709026821046272 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bf3a08a1d14 Crash State:...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::FileFormatMJ2Decompress::read_mdhd

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5918383458811904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...

kde-thumbnailers:gsthumbnail_fuzzer: Heap-buffer-overflow in dsc_copy_string

Detailed Report: https://oss-fuzz.com/testcase?key=5160199337082880 Project: kde-thumbnailers Fuzzing Engine: libFuzzer Fuzz Target: gsthumbnailfuzzer Job Type: libfuzzerasankde-thumbnailers Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7aa8d80e23c0 Crash State:...

mupdf:pdf_fuzzer: Heap-buffer-overflow in fz_unpack_line

Project: git://git.ghostscript.com/mupdf.git https://github.com/ArtifexSoftware/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4634427291664384 Project: mupdf Fuzzing Engine: honggfuzz Fuzz Target: pdffuzzer Job Type: honggfuzzasanmupdf Platform Id: linux Crash Type:...