libbiosig 安全漏洞

Libbiosig is an open-source software library developed by the BioSig Project for biomedical signal processing. It includes functions for bio-signal analysis. Version 3.9.2 of Libbiosig contains a security vulnerability, which stems from a heap buffer overflow in the Nicolet WFT parsing function...

RockyLinux 10 : 389-ds-base (RLSA-2026:3208)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3208 advisory. 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow CVE-2025-14905 Tenable has extracted the preceding description blo...

libpng: LIBPNG has a heap buffer overflow in png_set_quantize

A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...

CVE-2026-0006

In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

libvpx: Heap buffer overflow in libvpx

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Heap buffer overflow in libvpx...

libvpx: Heap buffer overflow in libvpx

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Heap buffer overflow in libvpx...

libvpx: Heap buffer overflow in libvpx

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Heap buffer overflow in libvpx...

opennavsurf-bag:bag_extended_fuzzer: Heap-buffer-overflow in H5VM_memcpyvv

Detailed Report: https://oss-fuzz.com/testcase?key=5384600712183808 Project: opennavsurf-bag Fuzzing Engine: libFuzzer Fuzz Target: bagextendedfuzzer Job Type: libfuzzerasanopennavsurf-bag Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7c938040b948 Crash State:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4678488962695168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x774ecade040c Crash State:...

openSUSE 16 Security Update : gimp (openSUSE-SU-2026:20275-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20275-1 advisory. Changes in gimp: - CVE-2026-2239: Fixed a heap buffer overflow in psd-util.c bsc1257959. Tenable has extracted the preceding description block directly...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_nal_parse_vcl_nal_partial

Detailed Report: https://oss-fuzz.com/testcase?key=6609205678374912 Project: libavc Fuzzing Engine: honggfuzz Fuzz Target: svcdecfuzzer Job Type: honggfuzzasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x74ac6409a800 Crash State: isvcdnalparsevclnalpartial...

pcre2:pcre2_fuzzer_32: Heap-buffer-overflow in pcre2_compile_32

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=6378939999387648 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer32 Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type:...

wolfssl:fuzzer-wolfssl-server-randomize: Heap-buffer-overflow in fuzzer_ticket_cb

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5623790192361472 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-server-randomize Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE...

Vim has a heap-buffer-overflow and a segmentation fault

...

PT-2026-22671

Name of the Vulnerable Software and Affected Versions affected versions not specified Description There is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution without requiring additional execution privileges or user interaction...

OESA-2026-1482 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::BgpLayer::computeCalculateFields

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5932977975787520 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

CVE-2026-28418

Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundar...

CVE-2026-28421

Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault SEGV exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issu...

CVE-2026-28421

Vim (versions before 9.2.0077) has a heap-buffer-overflow and a segmentation fault in the swap file recovery logic caused by unvalidated fields in crafted swap blocks. Version 9.2.0077 fixes the issue; upgrading to 9.2.0077 or newer mitigates it.