CVE-2026-49868

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, parsereply in sys/net/applicationlayer/dhcpv6/client.c omits minimum-length validation before passing IAPD and IANA option bodies to sub-option parsers. A...

CVE-2026-49868

The RIOT open-source microcontroller operating system is vulnerable to an unbounded out-of-bounds (OOB) heap read due to a missing minimum-length validation in the _parse_reply() function within sys/net/application_layer/dhcpv6/client.c. If MODULE_DHCPV6_CLIENT_IA_PD is enabled, a malicious or co...

CVE-2025-14321

CVE-2025-14321 Proof of Concept Description PoC for a Use-After-Free UAF vulnerability in the RTCEncodedFrameBase component of Firefox, exploitable via the WebRTC Encoded Transforms API. CVE-2025-14321 : The destructor of RTCEncodedFrameBase does not call DetachArrayBuffer when releasing the nati...

CVE-2026-111124

A flaw was found in cfitsio. An attacker could exploit this vulnerability by supplying a specially crafted Flexible Image Transport System FITS file containing compressed image data with invalid dither parameters. When processed by an application using the library, this flaw triggers an...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer bsc1254408. CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Perl vulnerabilities (USN-8675-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8675-1 advisory. It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker...

K000163667: libssh vulnerability CVE-2026-59842

Security Advisory Description A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated...

EulerOS 2.0 SP13 : perl-Socket (EulerOS-SA-2026-4088)

According to the versions of the perl-Socket packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, packipmreqsource checks the length of its source argumen...

EulerOS 2.0 SP13 : perl (EulerOS-SA-2026-4081)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in...

EulerOS 2.0 SP11 : perl-Socket (EulerOS-SA-2026-4361)

According to the versions of the perl-Socket packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, packipmreqsource checks the length of its source argumen...

Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2026-3211)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3211 advisory. Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perlstudychunk. When...

EulerOS 2.0 SP11 : perl (EulerOS-SA-2026-4357)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed...

Amazon Linux 2 : perl (ALAS-2026-3997)

The version of perl installed on the remote host is prior to 5.16.3-299. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3997 advisory. Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535...

CVE-2026-96394

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

CVE-2026-96395

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

EUVD-2026-95750

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

CVE-2026-96395

The Affinity by Canva app for macOS (versions prior to 3.3.1 ) is vulnerable to a heap memory disclosure due to an unchecked palette index in the QuickLook extensions . This flaw occurs because the application fails to perform adequate bounds checking when generating QuickLook thumbnails and prev...

CVE-2026-96395

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

EUVD-2026-95749

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

CVE-2026-96394

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...