Mageia: Security Advisory (MGASA-2026-0044)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libpng15 security update

1.5.30-14.1 - fix CVE-2026-25646: heap buffer overflow in pngsetquantize RHEL-148404...

free5GC 安全漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 1.2.8 contained security vulnerabilities; these vulnerabilities were caused by heap buffer overflows and could lead to denial-of-service attacks...

RHEL 9 : freerdp (RHSA-2026:3037)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3037 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

PostgreSQL 14.x < 14.21 / 15.x < 15.16 / 16.x < 16.12 / 17.x < 17.8 / 18.x < 18.2 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 14 prior to 14.21, 15 prior to 15.16, 16 prior to 16.12, 17 prior to 17.8, or 18 prior to 18.2. As such, it is potentially affected by multiple vulnerabilities: - Missing validation of multibyte character length in PostgreSQL text...

Oracle Linux 9 : libpng15 (ELSA-2026-3031)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-3031 advisory. 1.5.30-14.1 - fix CVE-2026-25646: heap buffer overflow in pngsetquantize RHEL-148404 Tenable has extracted the preceding description block directly from the...

rdkit:mol_deserialization_fuzzer: Heap-buffer-overflow in RDKit::streamRead

Detailed Report: https://oss-fuzz.com/testcase?key=4553794922020864 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldeserializationfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf4d01174 Crash State: RDKit::streamRead...

kimageformats:kimgio_jp2_fuzzer: Heap-buffer-overflow in bool JP2HandlerPrivate::jp2ToImage<unsigned char>

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5207703399235584 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgiojp2fuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

MGASA-2026-0046 Updated freerdp packages fix security vulnerabilities

FreeRDP has heap-buffer-overflow in planardecompressplanerle. CVE-2026-23530 FreeRDP has heap-buffer-overflow in cleardecompress. CVE-2026-23531 FreeRDP has heap-buffer-overflow in gdiSurfaceToSurface. CVE-2026-23532 FreeRDP has heap-buffer-overflow in cleardecompressresidualdata. CVE-2026-23533...

Updated freerdp packages fix security vulnerabilities

FreeRDP has heap-buffer-overflow in planardecompressplanerle. CVE-2026-23530 FreeRDP has heap-buffer-overflow in cleardecompress. CVE-2026-23531 FreeRDP has heap-buffer-overflow in gdiSurfaceToSurface. CVE-2026-23532 FreeRDP has heap-buffer-overflow in cleardecompressresidualdata. CVE-2026-23533...

libvips 安全漏洞

libvips is an open-source fast image processing library with low memory requirements. Versions of libvips 8.19.0 and earlier contain security vulnerabilities, which stem from a heap buffer overflow vulnerability in the vipssourcereadtomemory function...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_chb_append0

Project: http://hg.nginx.org/njs https://github.com/nginx/njs.git Detailed Report: https://oss-fuzz.com/testcase?key=6450872354930688 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ Cras...

assimp:assimp_fuzzer_glb: Heap-buffer-overflow in aiColor4t<float>* GetVertexColorsForType<unsigned short>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6295007387779072 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzerglb Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

FreeBSD : Mozilla -- Heap buffer overflow (6a81dc74-0e8b-11f1-b7d1-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6a81dc74-0e8b-11f1-b7d1-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2014390 reports: Heap buffer overflow in libvpx. Tenable ha...

SUSE SLES12 Security Update : postgresql18 (SUSE-SU-2026:0585-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0585-1 advisory. Update to version 18.2. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of serve...

CVE-2026-0797

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

MGASA-2026-0044 Updated libvpx packages fix security vulnerability

Heap buffer overflow in libvpx. CVE-2026-2447...

wasm3:fuzzer: Heap-buffer-overflow in PreserveRegisterIfOccupied

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6662378086531072 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7e4c0bd00354 Crash...

Security update for postgresql18

This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. CVE-2026-2004: intarray missing validation of type of input to selectivity...

kde-thumbnailers:gsthumbnail_fuzzer: Heap-buffer-overflow in dsc_copy_string

Detailed Report: https://oss-fuzz.com/testcase?key=5681195223678976 Project: kde-thumbnailers Fuzzing Engine: honggfuzz Fuzz Target: gsthumbnailfuzzer Job Type: honggfuzzasankde-thumbnailers Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7e4211fe23c0 Crash State:...