130 matches found
CVE-2026-63419
A flaw was found in OpenImageIO, a toolset for reading, writing, and manipulating image files. When processing specially crafted IFF Image File Format ZBUFFER tiles, the iffinput::readnativetile function may incorrectly handle pixel data sizes. This can lead to a heap out-of-bounds write, resulti...
CVE-2026-63419
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled iff is exposed with a 16-bit public imagespec while the decoder retains a 32-bit internal pixel...
CVE-2026-63419
OpenImageIO (a VFX/animation image I/O toolset) is vulnerable to a heap out-of-bounds write in its IFF image format plugin when processing zbuffer-only tiled files. The root cause is a mismatch between a 16-bit public imagespec and the decoder's 32-bit internal pixel size: IffInput::read_native_t...
SUSE CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
UBUNTU-CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
CVE-2026-82324 Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
EUVD-2026-67721
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
CVE-2026-82324
CVE-2026-82324 affects the file-iff (IFF/ILBM) plugin in GIMP . When processing a specially crafted IFF/ILBM image file, the plugin fails to properly validate the HAM row size and mishandles cases where the number of color planes (nPlanes ) is zero. This causes a row size mismatch that bypasses m...
CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
Linux Distros Unpatched Vulnerability : CVE-2026-82324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM...
CVE-2026-82324: Out-of-bounds Read
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
PT-2026-83158
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file-iff IFF/ILBM plugin. When processing a specially crafted IFF/ILBM image file, the plugin fails to properly validate the HAM row size and incorrectly handles scenarios...
PT-2026-69029
Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to 3.0.21.0 OpenImageIO versions prior to 3.1.16.0 OpenImageIO versions prior to 3.2.0.3-beta1 Description A heap out-of-bounds write and memory corruption occur when processing a zbuffer-only tiled iff file. This...
AZL-76428 CVE-2023-53685 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: tun: Fix memory leak for detached NAPI queue. syzkaller reported 0 memory leaks of sk and skb related to the TUN device with no repro, but we can reproduce it easily with: struct ifreq ifr = int fdtun, fdtmp; char buf4 = ; fdtun ...